What is the primary purpose of the certificate renewal process?

To increase the key size of an existing certificate without reissuing it

To revoke a certificate that has been compromised

To replace an expiring certificate with a new one that has a new validity period

To change the certificate's subject name without changing the key

A company is deploying a new web application and wants to ensure that the server is configured securely. They have a security baseline, but they also want to ensure that any changes to the configuration are logged and reviewed. What should they implement?

Disable logging to reduce performance overhead.

Manually review the configuration daily.

Use a configuration management tool to enforce the baseline, but do not log changes.

Enable audit logging on the server and integrate it with a SIEM system for monitoring and alerting.

What is the primary purpose of credential rotation?

To allow credentials to be stored in plaintext in configuration files

To ensure that all users have the same password for simplicity

To eliminate the need for multi-factor authentication

To reduce the risk of a compromised credential being used over a long period

A developer needs to access a production API key to debug an issue. The security team wants to ensure that the key is not exposed to other team members and that access is temporary. What should they do?

Share the API key with the developer via a secure messaging app.

Issue a temporary access token from the secrets management system that expires after a short period.

Give the developer the API key and ask them to delete it after debugging.

Add the developer to the production environment's admin group.

A developer's laptop was stolen. The laptop contained a private key used for code signing. The organization wants to minimize the impact and prevent future incidents. What should they do?

Revoke the compromised code-signing certificate and issue a new one, and move to a hardware-based key storage solution.

Issue a new certificate but do not revoke the old one.

Change the passphrase on the private key and continue using it.

Wait for the certificate to expire and then issue a new one.

Certified Secure Software Lifecycle Professional

Domain 7Objective 4

Store and Manage Security Data CSSLP Practice Questions (Page 2)

Part of the Secure Software Deployment, Operations, Maintenance domain, which accounts for 11% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–13 in this domain), expect 1–1 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

4concepts

11%of the exam

Questions 6–10

6foundation · easy
What is the primary purpose of the certificate renewal process?
Select an answer first
7application · medium
A company is deploying a new web application and wants to ensure that the server is configured securely. They have a security baseline, but they also want to ensure that any changes to the configuration are logged and reviewed. What should they implement?
Select an answer first
8foundation · easy
What is the primary purpose of credential rotation?
Select an answer first
9application · medium
A developer needs to access a production API key to debug an issue. The security team wants to ensure that the key is not exposed to other team members and that access is temporary. What should they do?
Select an answer first
10expert · medium
A developer's laptop was stolen. The laptop contained a private key used for code signing. The organization wants to minimize the impact and prevent future incidents. What should they do?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.