What is the role of a checksum (e.g., SHA-256) in the software deployment process?

To authenticate the user deploying the artifact

To provide a unique fingerprint of the artifact that can be used to detect any changes

To compress the artifact to reduce bandwidth usage during deployment

To encrypt the artifact so that it cannot be read during transmission

A deployment script downloads a software package from an internal repository and installs it on production servers. The security team wants to ensure that the package has not been tampered with during transit. Which step should be added to the script?

Compare the SHA-256 hash of the downloaded file against a known-good hash stored in a secure location.

Verify that the file name matches the expected package name.

Check that the file size matches the size listed on the repository website.

Ensure the download uses HTTPS and trust that the connection is secure.

What is the primary role of a Static Application Security Testing (SAST) tool in a CI/CD pipeline?

To scan container images for known vulnerabilities in the base OS and dependencies

To test the running application for vulnerabilities by simulating attacks

To analyze source code for security vulnerabilities without executing the application

To monitor production logs for security incidents

A company distributes a mobile application through an enterprise app store. The security team wants to ensure that the application binary has not been altered since it was built. Which control should be used?

Sign the application binary with the company's private key and verify the signature before distribution.

Store the application binary in a password-protected ZIP file.

Rely on the app store's malware scan to detect any alterations.

Use a checksum such as CRC32 to verify the binary.

A deployment script downloads a configuration file from a central server and applies it to multiple servers. The security team wants to ensure the file has not been modified. Which control should be used?

Ensure the file is stored in a directory with restricted permissions.

Verify that the file is served over HTTPS.

Compute the SHA-256 hash of the file and compare it to a known-good hash stored in a secure location.

Check the file's last-modified timestamp.

Certified Secure Software Lifecycle Professional

Domain 7Objective 3

Release Software Securely CSSLP Practice Questions (Page 6)

Part of the Secure Software Deployment, Operations, Maintenance domain, which accounts for 11% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 1–1 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

7concepts

11%of the exam

Questions 26–30

26foundation · easy
What is the role of a checksum (e.g., SHA-256) in the software deployment process?
Select an answer first
27application · medium
A deployment script downloads a software package from an internal repository and installs it on production servers. The security team wants to ensure that the package has not been tampered with during transit. Which step should be added to the script?
Select an answer first
28foundation · easy
What is the primary role of a Static Application Security Testing (SAST) tool in a CI/CD pipeline?
Select an answer first
29application · medium
A company distributes a mobile application through an enterprise app store. The security team wants to ensure that the application binary has not been altered since it was built. Which control should be used?
Select an answer first
30application · medium
A deployment script downloads a configuration file from a central server and applies it to multiple servers. The security team wants to ensure the file has not been modified. Which control should be used?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.