CSLLP Software Deployment, Operations, and Disposal 2

Question 1

What is the purpose of an incident response plan (IRP) in software operations?

Accepted Answer

To provide a structured approach for detecting, containing, eradicating, and recovering from security incidents

Answer

An IRP defines roles, responsibilities, and procedures that enable an organization to respond effectively to security incidents, minimizing damage and recovery time.

Question 2

Which disposal technique renders data on storage media unrecoverable by overwriting it multiple times with random data?

Accepted Answer

Secure wiping/overwriting

Answer

Secure overwriting (data wiping) replaces existing data with random or patterned bit sequences multiple times, making recovery impractical without physical destruction.

Question 3

What is the security significance of maintaining an audit log in production systems?

Accepted Answer

Audit logs provide a tamper-evident record of actions taken, supporting forensic investigation and accountability

Answer

Audit logs create a chronological, tamper-evident record of system and user activities, which is essential for detecting incidents, conducting forensic investigations, and demonstrating compliance.

Question 4

Which process involves systematically identifying and documenting all software assets and their versions in a production environment?

Accepted Answer

Software inventory management / asset management

Answer

Software asset management maintains an accurate inventory of all software deployed in the environment, enabling rapid identification of systems affected when new vulnerabilities are disclosed.

Question 5

What is a key security requirement for decommissioning a system that stored sensitive data?

Accepted Answer

Sanitizing all storage media to ensure no sensitive data can be recovered from decommissioned hardware

Answer

Before decommissioning, all storage media containing sensitive data must be sanitized using approved methods (overwriting, degaussing, or physical destruction) to prevent data recovery.

CSLLP - Certified Secure Software Lifecycle Professional Practice Test

CSLLP - Certified Secure Software Lifecycle Professional Practice Test

CSLLP Software Deployment, Operations, and Disposal 2