What is the main goal of a baseline configuration management process?

To ensure systems remain in a secure and consistent state over time

To eliminate the need for security audits

A company is deploying new servers that will handle highly sensitive data. The security team wants to ensure that the servers can be trusted from the moment they are powered on, and that any tampering with the hardware or firmware is detected. Which hardware security control is most effective?

Use a software-based antivirus solution on the servers.

Enable Secure Boot and use a Trusted Platform Module (TPM) to measure and verify the boot process.

Place the servers in a locked server room with video surveillance.

Install the latest firmware updates and configure a BIOS password.

A company is defining a secure baseline for its database servers. The baseline must include specific configuration settings, but the company also needs to ensure that the baseline can be updated as new security requirements emerge. Which approach best supports both needs?

Create a baseline document that is version-controlled and subject to a formal change review process.

Store the baseline in a shared document without version control to allow easy edits.

Allow each database administrator to modify the baseline as they see fit.

Define the baseline once and do not change it to avoid introducing inconsistencies.

After deploying a security patch, what is the most important verification step?

Deleting the patch file from the server

Rebooting the system multiple times

Confirming that the patch was successfully installed and the system is functioning correctly

Notifying users about the patch

A security patch has been deployed to a subset of production servers. The patch is intended to fix a critical vulnerability. After deployment, the security team needs to confirm that the patch was applied successfully and that the vulnerability is no longer exploitable. Which verification method is most reliable?

Check the patch installation log on each server to confirm the patch is listed as installed.

Compare the server configuration to the baseline to ensure no other changes were made.

Ask the system administrators to confirm that the patch was applied successfully.

Run a vulnerability scanner against the patched servers to confirm the vulnerability is no longer detected.

Certified Secure Software Lifecycle Professional

Domain 7Objective 2

Secure Configuration and Version Control CSSLP Practice Questions (Page 3)

Part of the Secure Software Deployment, Operations, Maintenance domain, which accounts for 11% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 1–1 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

10concepts

11%of the exam

Questions 11–15

11foundation · easy
What is the main goal of a baseline configuration management process?
Select an answer first
12application · medium
A company is deploying new servers that will handle highly sensitive data. The security team wants to ensure that the servers can be trusted from the moment they are powered on, and that any tampering with the hardware or firmware is detected. Which hardware security control is most effective?
Select an answer first
13expert · hard
A company is defining a secure baseline for its database servers. The baseline must include specific configuration settings, but the company also needs to ensure that the baseline can be updated as new security requirements emerge. Which approach best supports both needs?
Select an answer first
14foundation · easy
After deploying a security patch, what is the most important verification step?
Select an answer first
15application · medium
A security patch has been deployed to a subset of production servers. The patch is intended to fix a critical vulnerability. After deployment, the security team needs to confirm that the patch was applied successfully and that the vulnerability is no longer exploitable. Which verification method is most reliable?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.