CSSLP DOMAIN SECURE SOFTWARE
g g g
ARCHITECTUREAND DESIGN EXAM | NEW g g g g
EST ACTUAL EXAM COMPREHENSIVE QUES
g g g g
TIONS AND VERIFIED ANSWERS GRADED A
g g g g g
+ | 100% PASS | 2024 UPDATE!
g g g g g g
WhichgofgthegfollowinggcomponentsgofgthegJavagarchitecturegisgprimarilyg
responsiblegtogensuregtypegconsistency,gsafetygandgassuregthatgtheregareg
nogmaliciousginstructionsgingthegcode?
A. Garbagegcollector
B. ClassgLoader
C. BytecodegVerifier
D. JavagSecuritygManager
Correctganswer:gC.
BytecodegVerifiergisgthegmostgimportantgcomponentgofgthegJVMgfromgag
typegconsistencygviewpoint.gThegBytecodegVerifiergchecksgtogseegifgthe
.classgfilesgaregingthegClassgfilegformatgandgdoublegchecksgtogensuregth
atgtheregaregnogmaliciousginstructionsgingthegcodegthatgwouldgcompr
omisegthegrulesgofgtypegsafetygingJava.
,WhichgriskgcategorygisgdescribedgbygthegOWASPgAPIgSecuritygTopg10gasg"
APIsgexposinggendpointsgthatghandlegobjectgidentifiers"?
A. BrokengAuthentication
B. BrokengObjectgLevelgAuthorization
C. SecuritygMisconfiguration
D. UnrestrictedgResourcegConsumption
Correctganswer:gB.
API1:2023gingthegOWASPgAPIgSecuritygTopg10gisgaboutgbrokengobjectglev
elgauthorization.
Thegprimarygsecuritygconcerngwhengimplementinggcloudgapplicationsgi
sgrelatedgto
A. InsecuregAPIs
B. Datagleakagegand/orgloss
C. Abusegofgcomputinggresources
D. Unauthorizedgaccess
Correctganswer:gB.
,AlthoughgthegnefariousgusegofgAPIs,gsharedgtechnologiesgissuesgthatgca
ngbegabusedgandgunauthorizedgaccessgofgdatagandgsoftwareghostedgingt
hegcloud,gthegprimarygsecuritygconcerngisgrelatedgtogdatagdisclosure,gw
hichgincludesgleakagegand/orgloss.
Thegpredominantgformgofgmalwaregthatginfectsgmobilegappsgis
A. Virus
B. Ransomware
C. Worm
D. Spyware
Correctganswer:gD.
Thegpredominantgformgofgmalwaregthatginfectsgmobilegappsgisgspywar
e,gwhichgisgdesignedgtogsecretlygcollectginformationgfromgaguser'sgdevic
e,gsuchgasgpersonalgdata,gbrowsingghabits,glocation,gandgcredentials,gwi
thoutgtheirgknowledge.gMobilegdevicesgaregparticularlygtargetedgbygspy
waregbecausegofgthegvastgamountgofgsensitiveginformationgtheygstorega
ndgthegvarietygofgpermissionsgthatgappsgcangrequest.
MostgSupervisorygControlgAndgDatagAcquisitiong(SCADA)gsystemsgar
egsusceptiblegtogsoftwaregattacksgbecause
, A. Theygweregnotginitiallygimplementedgwithgsecuritygingmind
B. Thegskillsgofgaghackerghasgincreasedgsignificantly
C. Thegdatagthatgtheygcollectgaregofgtopgsecretgclassification
D. Thegfirewallsgthatgareginstalledgingfrontgofgthesegdevicesghavegbeeng
breached.
Correctganswer:gA.
MostgSCADAgsystemsgweregnotgoriginallygdesignedgwithgsecuritygingmin
dgandgbasicgprotectiongmechanismsglikegauthenticationgandgauthorizati
on,gtogthesegsystemsgisgweak,gifgatgallgpresent.
HowgmanygcategoriesgdoesgthegZachmangframeworkgcontaingforgdescribi
nggcomplexgsystems?
A. 24
B. 30
C. 36
D. 42
Correctganswer:gC.
g g g
ARCHITECTUREAND DESIGN EXAM | NEW g g g g
EST ACTUAL EXAM COMPREHENSIVE QUES
g g g g
TIONS AND VERIFIED ANSWERS GRADED A
g g g g g
+ | 100% PASS | 2024 UPDATE!
g g g g g g
WhichgofgthegfollowinggcomponentsgofgthegJavagarchitecturegisgprimarilyg
responsiblegtogensuregtypegconsistency,gsafetygandgassuregthatgtheregareg
nogmaliciousginstructionsgingthegcode?
A. Garbagegcollector
B. ClassgLoader
C. BytecodegVerifier
D. JavagSecuritygManager
Correctganswer:gC.
BytecodegVerifiergisgthegmostgimportantgcomponentgofgthegJVMgfromgag
typegconsistencygviewpoint.gThegBytecodegVerifiergchecksgtogseegifgthe
.classgfilesgaregingthegClassgfilegformatgandgdoublegchecksgtogensuregth
atgtheregaregnogmaliciousginstructionsgingthegcodegthatgwouldgcompr
omisegthegrulesgofgtypegsafetygingJava.
,WhichgriskgcategorygisgdescribedgbygthegOWASPgAPIgSecuritygTopg10gasg"
APIsgexposinggendpointsgthatghandlegobjectgidentifiers"?
A. BrokengAuthentication
B. BrokengObjectgLevelgAuthorization
C. SecuritygMisconfiguration
D. UnrestrictedgResourcegConsumption
Correctganswer:gB.
API1:2023gingthegOWASPgAPIgSecuritygTopg10gisgaboutgbrokengobjectglev
elgauthorization.
Thegprimarygsecuritygconcerngwhengimplementinggcloudgapplicationsgi
sgrelatedgto
A. InsecuregAPIs
B. Datagleakagegand/orgloss
C. Abusegofgcomputinggresources
D. Unauthorizedgaccess
Correctganswer:gB.
,AlthoughgthegnefariousgusegofgAPIs,gsharedgtechnologiesgissuesgthatgca
ngbegabusedgandgunauthorizedgaccessgofgdatagandgsoftwareghostedgingt
hegcloud,gthegprimarygsecuritygconcerngisgrelatedgtogdatagdisclosure,gw
hichgincludesgleakagegand/orgloss.
Thegpredominantgformgofgmalwaregthatginfectsgmobilegappsgis
A. Virus
B. Ransomware
C. Worm
D. Spyware
Correctganswer:gD.
Thegpredominantgformgofgmalwaregthatginfectsgmobilegappsgisgspywar
e,gwhichgisgdesignedgtogsecretlygcollectginformationgfromgaguser'sgdevic
e,gsuchgasgpersonalgdata,gbrowsingghabits,glocation,gandgcredentials,gwi
thoutgtheirgknowledge.gMobilegdevicesgaregparticularlygtargetedgbygspy
waregbecausegofgthegvastgamountgofgsensitiveginformationgtheygstorega
ndgthegvarietygofgpermissionsgthatgappsgcangrequest.
MostgSupervisorygControlgAndgDatagAcquisitiong(SCADA)gsystemsgar
egsusceptiblegtogsoftwaregattacksgbecause
, A. Theygweregnotginitiallygimplementedgwithgsecuritygingmind
B. Thegskillsgofgaghackerghasgincreasedgsignificantly
C. Thegdatagthatgtheygcollectgaregofgtopgsecretgclassification
D. Thegfirewallsgthatgareginstalledgingfrontgofgthesegdevicesghavegbeeng
breached.
Correctganswer:gA.
MostgSCADAgsystemsgweregnotgoriginallygdesignedgwithgsecuritygingmin
dgandgbasicgprotectiongmechanismsglikegauthenticationgandgauthorizati
on,gtogthesegsystemsgisgweak,gifgatgallgpresent.
HowgmanygcategoriesgdoesgthegZachmangframeworkgcontaingforgdescribi
nggcomplexgsystems?
A. 24
B. 30
C. 36
D. 42
Correctganswer:gC.
