CSL Study Guide 2026
Everything you need to pass the CSL exam in one place: the exam format, every topic to study, real practice questions with explanations, flashcards, and full-length practice tests. Free, no sign-up needed.
📋 CSL Exam Format at a Glance
📚 CSL Topics to Study (38)
✍️ Sample CSL Questions & Answers
1. The legal concept of 'least privilege' in access control directly supports incident response by:
Limiting user privileges to only what is needed restricts an attacker's ability to move laterally and escalate privileges during a breach.
2. Which NIST Special Publication provides guidelines for security categorization of federal information and information systems?
NIST SP 800-60 provides guidance for mapping information and information system types to security categories (Low, Moderate, High) as required by FIPS 199.
3. Which state was the first in the U.S. to enact a comprehensive data security law requiring businesses to implement reasonable security measures for personal information?
Massachusetts enacted 201 CMR 17.00 in 2010, one of the earliest and most prescriptive state laws requiring a Written Information Security Program (WISP).
4. What is a Master Service Agreement (MSA) in the context of cybersecurity vendor relationships?
An MSA is a foundational contract establishing overall terms governing a long-term vendor relationship, with individual Statements of Work (SOWs) addressing specific projects or services.
5. The concept of 'pseudonymization' under GDPR is best described as which of the following?
Pseudonymization replaces direct identifiers with artificial ones; the data remains personal data because re-identification is possible with the separately stored key.
6. Which federal law specifically criminalizes identity theft and requires a mandatory two-year consecutive sentence for using another person's means of identification during a felony?
18 U.S.C. § 1028A imposes a mandatory two-year sentence, served consecutively, for knowingly using another person's means of identification during a felony.