
Certified Secure Software Lifecycle Professional
Domain 8Objective 5
Support Contractual Requirements (e.g., Intellectual Property Ownership, Code Escrow, Liability, Warranty, End-User License Agreement (EULA), Service-Level Agreements (SLA)) CSSLP Practice Questions (Page 5)
Part of the Secure Software Supply Chain domain, which accounts for 10% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)
26questions here
6free pages
6concepts
10%of the exam
Questions 21–25
- 21
A startup is negotiating a contract with a large enterprise customer. The customer insists that any custom modifications made to the startup's commercial off-the-shelf (COTS) product during the engagement become the customer's sole property. The startup's legal team wants to retain ownership of the core product while granting the customer rights to the modifications. Which contractual approach best satisfies both parties?
Select an answer first - 22
Which clause in a software contract is most likely to cap the vendor's financial exposure for damages?
Select an answer first - 23
A company is licensing a critical application from a vendor. The vendor is a small startup with limited financial resources. The company wants to ensure it can access the source code if the vendor ceases operations. The vendor agrees to a code escrow. What is the most important element for the company to verify in the escrow arrangement?
Select an answer first - 24
A company licenses a critical application from a vendor. The contract includes a code escrow agreement. The vendor misses a scheduled update to the escrow deposit, but the company has not experienced any issues with the software. The company's legal team wants to invoke the escrow and obtain the source code. Which factor is most important in determining whether the company can successfully invoke the escrow?
Select an answer first - 25
Which of the following is a typical trigger for the release of source code from a code escrow account?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.