A healthcare application stores patient records in a cloud database. The compliance team requires that any data breach be reported with details of which specific user accessed which records. The security architect decides to encrypt the database and enable detailed audit logging. Which additional control is essential to meet the compliance requirement?

Implement multi-factor authentication for all database users

Configure the database to use a shared service account for application access

Assign a unique user account to each individual and log all access events

Use a transparent data encryption layer to protect data at rest

Certified Secure Software Lifecycle Professional

Domain 1Objective 1

Understand Core Concepts CSSLP Practice Questions (Page 2)

Part of the Secure Software Concepts domain, which accounts for 12% of the CSSLP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~8–14 in this domain), expect 4–7 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

8concepts

12%of the exam

Questions 6–10

6foundation · easy
Which security goal is achieved by maintaining detailed logs that record which user performed a specific action?
Select an answer first
7application · medium
A healthcare application stores patient records in a cloud database. The compliance team requires that any data breach be reported with details of which specific user accessed which records. The security architect decides to encrypt the database and enable detailed audit logging. Which additional control is essential to meet the compliance requirement?
Select an answer first
8foundation · easy
Which mechanism is used to detect whether data has been modified during transmission?
Select an answer first
9foundation · easy
Which technology is commonly used to provide nonrepudiation for a digitally signed document?
Select an answer first
10foundation · easy
Which mechanism is used to define which users or groups can read, write, or execute a specific file?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSSLP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CSSLP” is a trademark of its owner, used for identification only.

Understand Core Concepts CSSLP Practice Questions (Page 2)

Questions 6–10

Which security goal is achieved by maintaining detailed logs that record which user performed a specific action?

Which mechanism is used to detect whether data has been modified during transmission?

Which technology is commonly used to provide nonrepudiation for a digitally signed document?

Which mechanism is used to define which users or groups can read, write, or execute a specific file?

Keep studying — Secure Software Concepts