CSLLP Software Deployment, Operations, and Disposal

Question 1

Which process ensures that software is deployed consistently and securely using automated, repeatable steps?

Accepted Answer

Continuous integration/continuous deployment (CI/CD) pipeline

Answer

A secure CI/CD pipeline automates building, testing, and deploying software with consistent security checks applied at every stage, reducing human error and ensuring repeatable deployments.

Question 2

What is the purpose of configuration management in secure software operations?

Accepted Answer

To maintain a known, secure baseline of system configurations and control changes to them

Answer

Configuration management establishes and maintains secure baselines for systems, ensuring that changes are tracked, authorized, and do not introduce security regressions.

Question 3

Which practice involves monitoring production systems continuously for signs of security incidents or anomalous behavior?

Accepted Answer

Security information and event management (SIEM)

Answer

SIEM systems aggregate and correlate log data from across the environment in real time, generating alerts for suspicious patterns that may indicate a security incident.

Question 4

What is the primary security concern with end-of-life (EOL) software components in production?

Accepted Answer

They no longer receive security patches, leaving known vulnerabilities permanently unaddressed

Answer

EOL software no longer receives security updates from the vendor, meaning known vulnerabilities will remain unpatched indefinitely, creating persistent risk in production environments.

Question 5

Which secure deployment technique runs two identical production environments, directing traffic to one while updating the other, enabling instant rollback?

Accepted Answer

Blue-green deployment

Answer

Blue-green deployment maintains two identical environments; the live 'blue' environment serves traffic while the 'green' is updated, and traffic is switched after validation, enabling instant rollback.

CSLLP - Certified Secure Software Lifecycle Professional Practice Test

CSLLP - Certified Secure Software Lifecycle Professional Practice Test

CSLLP Software Deployment, Operations, and Disposal