Verify and Validate Documentation (e.g., Installation and Setup Instructions, Error Messages, User Guides, Release Notes) CSSLP Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A user guide for a new email application describes a feature that allows users to 'send encrypted emails.' The guide instructs users to enable encryption by clicking a button. However, the guide does not explain that encryption only protects the email in transit, not the email at rest on the recipient's server. What is the most important reason this is a documentation issue?

   • AThe user guide should be reviewed by a technical writer for clarity.
   • BThe user guide should include a section on how to configure the email server.
   • CThe user guide is too technical and should be simplified for non-technical users.
   • DThe user guide could mislead users into believing their emails are fully protected, when in fact they may be stored unencrypted.
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A security tester is reviewing the user guide for a new mobile banking application. The guide describes a 'Remember Me' feature that keeps users logged in on their device. The guide does not mention any security risks associated with this feature, such as the risk of unauthorized access if the device is lost or stolen. What is the most important reason this is a documentation issue?

   • AThe user guide is not long enough to cover all features of the application.
   • BThe user guide fails to inform users of the security implications of using the 'Remember Me' feature, which could lead to unsafe usage.
   • CThe user guide should include a section on how to contact customer support.
   • DThe user guide should be written in a more technical language for advanced users.
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   A security tester is validating the documentation for a new version of a web application. The release notes state that the application now supports 'single sign-on (SSO) with SAML 2.0.' However, the installation guide does not mention any SSO configuration steps. The user guide also does not explain how users can log in using SSO. What is the most significant documentation gap?

   • AThe user guide should be updated to include a section on how to troubleshoot SSO login issues.
   • BThe release notes are inaccurate because they mention a feature that is not documented elsewhere.
   • CThe release notes should be removed because they mention a feature that is not fully documented.
   • DThe installation and user guides lack critical information on how to configure and use the new SSO feature, which could lead to insecure or incorrect deployment.
   Reveal Solution Discussion Select an answer first
5. 24foundation · medium

   Which of the following is an example of security-relevant documentation content?

   • AInstructions for changing the application's logo.
   • BInstructions for exporting data to a CSV file.
   • CInstructions for enabling two-factor authentication.
   • DInstructions for customizing the user interface theme.
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A user guide for a file-sharing application describes a feature that allows users to 'securely share files with external partners.' The guide instructs users to set the file permission to 'Public' and to share the link via email. The guide does not mention any other security settings. What is the most significant issue with this user guide?

   • AThe guide does not explain how to upload files to the application.
   • BThe guide's definition of 'secure sharing' is inaccurate, as it recommends a configuration that exposes files to anyone with the link.
   • CThe guide should be reviewed by a technical writer to improve its readability.
   • DThe guide should include a section on how to delete shared files.
   Reveal Solution Discussion Select an answer first