At ValidExamDumps, we consistently monitor updates to the ISC2 CSSLP exam questions by ISC2. Whenever our team identifies changes in the exam questions, objectives, focus areas or requirements, We immediately update our exam questions for both PDF and online practice exams. This commitment ensures our customers always have access to the most current and accurate questions. By preparing with these up to date and 100% exam domain coverage questions, our customers can successfully pass the ISC2 Certified Secure Software Lifecycle Professional exam on their first attempt without needing additional materials or study guides.
Other certification materials providers often include outdated or removed questions by ISC2 in their CSSLP exam. These outdated questions lead to customers failing their ISC2 Certified Secure Software Lifecycle Professional exam. In contrast, we ensure our questions bank includes only precise and up-to-date questions. Our main priority is your success in the ISC2 CSSLP exam, not profiting from selling obsolete exam questions in PDF or Online Practice Test.
Security Test and Evaluation (ST&E) is a component of risk assessment. It is useful in discovering system vulnerabilities. For what purposes is ST&E used?
Each correct answer represents a complete solution. Choose all that apply.
Security Test and Evaluation (ST&E) is a component of risk assessment. It is useful in discovering system vulnerabilities. According to NIST SP
800-42 (Guideline on Network Security Testing), ST&E is used for the following purposes:
To assess the degree of consistency between the system documentation and its implementation
To determine the adequacy of security mechanisms, assurances, and other properties to enforce the security policy
To uncover design, implementation, and operational flaws that may allow the violation of security policy
Answer A is incorrect. ST&E is not used for the implementation of the system architecture.
Which of the following is the duration of time and a service level within which a business process must be restored after a disaster in order to
avoid unacceptable consequences associated with a break in business continuity?
The Recovery Time Objective (RTO) is the duration of time and a service level within which a business process must be restored after a
disaster or disruption in order to avoid unacceptable consequences associated with a break in business continuity. It includes the time for
trying to fix the problem without a recovery, the recovery itself, tests and the communication to the users. Decision time for user
representative is not included. The business continuity timeline usually runs parallel with an incident management timeline and may start at
the same, or different, points.
In accepted business continuity planning methodology, the RTO is established during the Business Impact Analysis (BIA) by the owner of a
process (usually in conjunction with the Business Continuity planner). The RTOs are then presented to senior management for acceptance.
The RTO attaches to the business process and not the resources required to support the process.
Answer B is incorrect. The Recovery Time Actual (RTA) is established during an exercise, actual event, or predetermined based on
recovery methodology the technology support team develops. This is the time frame the technology support takes to deliver the recovered
infrastructure to the business.
Answer D is incorrect. The Recovery Consistency Objective (RCO) is used in Business Continuity Planning in addition to Recovery Point
Objective (RPO) and Recovery Time Objective (RTO). It applies data consistency objectives to Continuous Data Protection services.
Answer C is incorrect. The Recovery Point Objective (RPO) describes the acceptable amount of data loss measured in time. It is the
point in time to which data must be recovered as defined by the organization. The RPO is generally a definition of what an organization
determines is an 'acceptable loss' in a disaster situation. If the RPO of a company is 2 hours and the time it takes to get the data back into
production is 5 hours, the RPO is still 2 hours. Based on this RPO the data must be restored to within 2 hours of the disaster.
Which of the following actions does the Data Loss Prevention (DLP) technology take when an agent detects a policy violation for data of all states?
Each correct answer represents a complete solution. Choose all that apply.
When an agent detects a policy violation for data of all states, the Data Loss prevention (DLP) technology takes one of the following actions:
It creates an alert.
It notifies an administrator of a violation.
It quarantines the file to a secure location.
It encrypts the file.
It blocks the transmission of content.
Answer C is incorrect. Data Loss Prevention (DLP) reconstructs the session when data is in motion.
In which of the following IDS evasion attacks does an attacker send a data packet such that IDS accepts the data packet but the host computer rejects it?
In an insertion attack, an IDS accepts a packet and assumes that the host computer will also accept it. But in reality, when a host system
rejects the packet, the IDS accepts the attacking string that will exploit vulnerabilities in the IDS. Such attacks can badly infect IDS signatures
and IDS signature analysis.
Answer B is incorrect. In this approach, an attacker sends packets in such a manner that one packet fragment overlaps data from a
previous fragment. The information is organized in the packets in such a manner that when the victim's computer reassembles the packets, an
attack string is executed on the victim's computer. Since the attacking string is in fragmented form, IDS is unable to detect it.
Answer C is incorrect. In this approach, an attacker sends packets in such a manner that one packet fragment overwrites data from a
previous fragment. The information is organized into the packets in such a manner that when the victim's computer reassembles the packets,
an attack string is executed on the victim's computer. Since the attacking string is in fragmented form, IDS becomes unable to detect it.
Answer A is incorrect. An evasion attack is one in which an IDS rejects a malicious packet but the host computer accepts it. Since an IDS
has rejected it, it does not check the contents of the packet. Hence, using this technique, an attacker can exploit the host computer. In many
cases, it is quite simple for an attacker to send such data packets that can easily perform evasion attacks on an IDSs.
Which of the following plans is a comprehensive statement of consistent actions to be taken before, during, and after a disruptive event that causes a significant loss of information systems resources?
A disaster recovery plan is a complete statement of reliable actions to be taken before, during, and after a disruptive event that causes a
considerable loss of information systems resources. The chief objective of a disaster recovery plan is to provide an organized way to make
decisions if a disruptive event occurs.
Disaster recovery planning is a subset of a larger process known as business continuity planning and should include planning for resumption
of applications, data, hardware, communications (such as networking), and other IT infrastructure. A business continuity plan (BCP) includes
planning for non-IT related aspects such as key personnel, facilities, crisis communication, and reputation protection, and should refer to the
disaster recovery plan (DRP) for IT-related infrastructure recovery/continuity.
Answer D is incorrect. Business Continuity Planning (BCP) is the creation and validation of a practiced logistical plan for how an
organization will recover and restore partially or completely interrupted critical (urgent) functions within a predetermined time after a disaster
or extended disruption. The logistical plan is called a business continuity plan.
Answer B is incorrect. The Continuity Of Operation Plan (COOP) refers to the preparations and institutions maintained by the United
States government, providing survival of federal government operations in the case of catastrophic events. It provides procedures and
capabilities to sustain an organization's essential. COOP is the procedure documented to ensure persistent critical operations throughout any
period where normal operations are unattainable.
Answer A is incorrect. A contingency plan is a plan devised for a specific situation when things could go wrong. Contingency plans are
often devised by governments or businesses who want to be prepared for anything that could happen. Contingency plans include specific
strategies and actions to deal with specific variances to assumptions resulting in a particular problem, emergency, or state of affairs. They also
include a monitoring process and 'triggers' for initiating planned actions. They are required to help governments, businesses, or individuals to
recover from serious incidents in the minimum time with minimum cost and disruption.
