What is the primary goal of threat modeling in protocol design?

To reduce the number of protocol messages

To identify potential attack vectors and mitigate them before implementation

To document the protocol's performance characteristics

To ensure the protocol is compatible with all browsers

A security operations center (SOC) collects logs from various sources into a central SIEM. The SOC team is concerned about an attacker modifying logs to cover their tracks. Which control is most effective in preventing log tampering?

Compress logs to save storage space.

Store logs in a write-once, read-many (WORM) storage system.

Encrypt logs with a key stored on the same server.

Send logs to a syslog server on the same network segment.

A company is designing a management interface for its cloud infrastructure. The interface will be used by administrators to manage virtual machines, networks, and storage. The company wants to ensure that only authorized administrators can access the interface and that all management actions are logged. Which combination of controls is most appropriate?

Use API keys for authentication and log all API calls.

Use a shared admin account with a complex password.

Use multi-factor authentication (MFA) and role-based access control (RBAC), and enable audit logging.

Use a VPN for access and rely on the VPN's logging.

Which characteristic is typical of a secure out-of-band management implementation?

It relies on the production firewall for all access control

It shares the same network as production services to simplify routing

It uses a separate network segment or dedicated hardware that is not accessible from the production network

It uses unencrypted protocols like Telnet for ease of use

What should be considered when selecting a protocol for a new application?

The protocol's ability to maximize network bandwidth usage

The protocol's compatibility with legacy systems only

The protocol's popularity among developers

The protocol's security features, such as encryption and authentication, and its fit with the threat model

Certified Secure Software Lifecycle Professional

Domain 4Objective 2

Perform Secure Interface Design CSSLP Practice Questions (Page 3)

Part of the Secure Software Architecture and Design domain, which accounts for 15% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~11–18 in this domain), expect 2–3 from this objective — we provide 32 practice questions to prepare you well beyond it. (estimate)

32questions here

7free pages

9concepts

15%of the exam

Questions 11–15

11foundation · easy
What is the primary goal of threat modeling in protocol design?
Select an answer first
12application · medium
A security operations center (SOC) collects logs from various sources into a central SIEM. The SOC team is concerned about an attacker modifying logs to cover their tracks. Which control is most effective in preventing log tampering?
Select an answer first
13expert · medium
A company is designing a management interface for its cloud infrastructure. The interface will be used by administrators to manage virtual machines, networks, and storage. The company wants to ensure that only authorized administrators can access the interface and that all management actions are logged. Which combination of controls is most appropriate?
Select an answer first
14foundation · easy
Which characteristic is typical of a secure out-of-band management implementation?
Select an answer first
15foundation · easy
What should be considered when selecting a protocol for a new application?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.