VIP Exclusive
CSLLP VIP Certification Exam
CSLLP — The CSLLP (Certified Secure Software Lifecycle Professional) is issued by (ISC)², consisting of 125 CAT (Computer Adaptive Testing) multiple-choice questions over 3 hours with a passing score of 700/1000 (70%), covering 8 CBK domains: Secure Software Concepts, Requirements, Architecture & Design, Implementation, Testing, Lifecycle Management, Deployment/Operations/Maintenance, and Supply Chain & Software Acquisition.
57
Questions
90m
Time Limit
70.00%
To Pass
Question 1 of 57👑 VIP
A financial services company is developing a new online banking portal. During a threat modeling session, the security architect identifies that an attacker could intercept session tokens by exploiting an unencrypted communication channel between the client browser and an internal microservice. Which core security concept does this threat most directly violate, and what is the MOST appropriate countermeasure to apply at the architecture level?
Questions 2–57 and full explanations are VIP-exclusive.