CSSLP Secure Software Deployment Operations And Management — 20 Questions

Question 1

You are troubleshooting a production incident where a legacy application is performing insecure cryptographic operations. Which feature of a Web Application Firewall (WAF) can best help mitigate the risk while a code fix is being developed?

Choose an answer to begin — your selection is scored in the full session.

Accepted Answer

Deploy a custom WAF rule to block requests containing anomalous cryptographic parameters.. WAFs allow for virtual patching by blocking specific attack patterns before they reach the vulnerable code, buying time for developers.

Answer

Upgrade the SSL/TLS certificate to a higher bit-length.

Answer

Enable HTTP/2 protocol enforcement on the WAF load balancer.

Answer

Disable the WAF's logging feature to improve response time during the incident.

Question 2

During an incident response, you identify that a threat actor has gained unauthorized access to an application's environment variables. What is the immediate correct step to take regarding credential management?

Accepted Answer

Change the password for the database user and update the application deployment manifest.. When secrets are compromised, they must be considered permanently tainted and rotated immediately to maintain the security posture.

Answer

Clear the application's cache to remove any temporary sensitive data.

Answer

Increase the logging level to 'DEBUG' to track the attacker's actions.

Answer

Re-deploy the application using the same configuration to ensure a clean state.

Question 3

To ensure secure deployment of software artifacts, you must verify the integrity of the binaries. Which mechanism is most effective for ensuring that artifacts have not been tampered with since they were signed by the build system?

Accepted Answer

Verify the digital signature using a trusted public key from your organization's key store.. Cryptographic signing (such as GPG or Cosign for containers) creates a verifiable link between the source code and the binary.

Answer

Check the file timestamp using the operating system's file system metadata.

Answer

Upload the artifact to a public VirusTotal scan before deploying.

Answer

Compare the file size of the artifact with the size listed in the manifest file.

Question 4

A security analyst notices anomalous outbound traffic from a containerized microservice that was recently deployed. Which Kubernetes feature should be used to restrict this traffic to only known authorized endpoints?

Accepted Answer

Apply a NetworkPolicy object that defines specific egress rules for the application namespace.. Kubernetes Network Policies are the standard resource for enforcing micro-segmentation and egress traffic control at the pod level.

Answer

Enable the Kubernetes Audit Log and monitor for kubectl exec commands.

Answer

Configure PodSecurityPolicies to restrict the containers to non-root users.

Answer

Install a Service Mesh like Istio to enforce mTLS.

Question 5

Which of the following is a primary objective of 'Secure Configuration Management' in the software lifecycle?

Accepted Answer

Maintaining a consistent and hardened state across all environments.. Configuration management ensures that all environments are consistently set up to a known secure baseline, preventing configuration drift.

Answer

Reducing the total cost of ownership of the cloud infrastructure.

Answer

Ensuring that developers have administrative access to production databases.

Answer

Maximizing the number of features delivered in each release.

Question 6

You are implementing CI/CD pipelines using Jenkins. You need to ensure that container images are scanned for vulnerabilities before they are promoted to production. Which tool integration is most effective for this stage?

Accepted Answer

Use the Jenkins Snyk Security plugin to trigger a scan during the image build step.. Integrating a tool like Anchore or Snyk directly into the Jenkins pipeline allows for blocking builds that contain known critical vulnerabilities.

Answer

Configure a post-deployment notification to Slack using a webhook.

Answer

Manually verify image signatures using Docker Content Trust after deployment.

Answer

Enable Jenkins 'Build periodically' to scan images in the registry.

Question 7

When managing infrastructure as code (IaC) using Terraform, which practice is the most critical for secure configuration management of state files?

Accepted Answer

Use a remote backend like S3 with server-side encryption enabled and restricted IAM policies.. Terraform state files often contain sensitive information in plain text, making backend encryption and access control mandatory.

Answer

Rename the state file to 'secret.tfstate' to hide it from attackers.

Answer

Store state files in a version-controlled Git repository for change tracking.

Answer

Manually delete the state file after every Terraform apply command.

Question 8

You are deploying a web application to AWS using Elastic Beanstalk. To ensure secure configuration management, you decide to store sensitive database credentials. Which approach is the most secure according to AWS best practices?

Accepted Answer

Use AWS Secrets Manager to inject secrets as environment variables during instance bootstrap.. AWS Systems Manager Parameter Store with SecureString or AWS Secrets Manager are the recommended ways to handle sensitive application configuration to prevent hardcoding.

Answer

Hardcode the credentials in the application code and use AWS KMS to encrypt the binary at rest.

Answer

Use the Elastic Beanstalk Console to set plain-text environment properties.

Answer

Store credentials in the .ebextensions/environment.config file with read-only permissions.

Question 9

You are implementing 'Blue-Green' deployment. What is the most critical security step to perform during the cut-over process?

Accepted Answer

Run automated security integration tests on the Green environment while it is behind the load balancer.. Security testing (smoke tests) must be performed on the 'Green' environment before it starts receiving production traffic to ensure the new version is not misconfigured.

Answer

Immediately shut down the Blue environment to save costs.

Answer

Update the load balancer configuration to point to both environments simultaneously.

Answer

Ensure both environments use the same shared database instance.

Question 10

You are auditing your software deployment process. Which practice is best to prevent 'Dependency Confusion' attacks where malicious packages are pulled from public registries instead of internal ones?

Accepted Answer

Define specific versions for all dependencies in a lock file and use a private repository with scoped registries.. Configuring a private repository manager (like JFrog Artifactory) to prioritize internal scopes and block external lookup for those namespaces prevents dependency confusion.

Answer

Run all build processes in an isolated network segment without internet access.

Answer

Use only open-source software libraries.

Answer

Regularly scan the public registries for malicious packages.

Question 11

You are evaluating container orchestration security. What is the purpose of a 'Sidecar Container' in a Service Mesh?

Accepted Answer

To intercept and manage network traffic to enforce mTLS and authorization policies.. Sidecars, such as those in Istio or Linkerd, handle security concerns like mTLS, authentication, and logging so the main application code does not have to.

Answer

To act as a backup for the main container if it crashes.

Answer

To provide additional CPU and memory resources to the main container.

Answer

To store persistent data for the main application.

Question 12

When setting up operational monitoring, what is the 'Golden Signal' that specifically indicates a potential Denial of Service (DoS) attack?

Accepted Answer

A significant increase in the rate of 5xx errors and request latency.. A sudden spike in error rates or latency, combined with high request volume, is a primary indicator of a DoS attack.

Answer

An increase in the number of developers logged into the system.

Answer

A decrease in CPU utilization across all servers.

Answer

A reduction in database write operations.

Question 13

Which of the following is a key component of a 'Secure Software Deployment' plan?

Accepted Answer

A rollback procedure that allows returning to a known good state.. A deployment plan must include a rollback procedure in case a critical vulnerability or failure is discovered after release.

Answer

A list of all developers who worked on the release.

Answer

A plan for decommissioning all previous versions of the software.

Answer

An automated script that changes the administrator password on every server.

Question 14

You are configuring log aggregation for a microservices architecture. Which practice is essential for secure logging management?

Accepted Answer

Implement an automated log masking process to remove sensitive data like session tokens and PII before ingestion.. Log files often contain PII or secrets; they must be redacted before storage and access must be strictly controlled.

Answer

Store all application logs in a publicly accessible S3 bucket for easy debugging.

Answer

Delete all logs after 24 hours to ensure compliance with the Right to be Forgotten.

Answer

Increase the log verbosity to the maximum level in production indefinitely.

Question 15

You are managing secure deployment for a Java application. You need to ensure that the application runtime does not have excessive permissions. Which runtime security practice is most effective?

Accepted Answer

Configure a custom Java Security Manager policy file to restrict access to sensitive system resources.. Principle of least privilege at the runtime level involves using Java Security Managers or container isolation to restrict system calls and file access.

Answer

Run the Java application as the root user to ensure all permissions are available.

Answer

Disable the Java Virtual Machine's garbage collection to prevent memory-based attacks.

Answer

Assign a public IP address to the application server to facilitate remote debugging.

Question 16

Which TWO actions should be taken when preparing a software build for a secure production deployment?

Accepted Answer

Perform a Software Composition Analysis (SCA) to identify vulnerable dependencies.. Software composition analysis and signing are essential for verifying the integrity and security of the third-party components and the final artifact.

Answer

Embed hardcoded credentials for the database in the build artifact to ensure connectivity.

Answer

Bypass unit tests to speed up the deployment pipeline.

Answer

Compile the code with debugging symbols enabled for easier production troubleshooting.

Question 17

Which THREE configuration management practices help reduce 'Configuration Drift' in a secure software environment?

Accepted Answer

Implementing automated drift detection and remediation tools.. Infrastructure as Code, immutable infrastructure, and automated configuration auditing are the pillars of minimizing configuration drift.

Answer

Disabling all automated deployment pipelines.

Answer

Allowing manual configuration changes via the SSH console.

Question 18

Which TWO security monitoring strategies should be implemented to secure an application during its operational lifecycle?

Accepted Answer

Implement centralized log aggregation with automated alerting for security events.. Log monitoring and egress filtering are essential for detecting and containing active threats in production.

Answer

Share all internal server IP addresses in the public DNS records.

Answer

Permit all inbound traffic on port 80 to ensure maximum availability.

Answer

Disable all egress traffic from the application servers to prevent data exfiltration.

Question 19

Which THREE security controls are essential when implementing a 'Secure CI/CD' pipeline?

Accepted Answer

Using a secure credential vault to inject secrets at runtime.. Pipeline security requires securing the build environment, scanning the artifacts, and protecting the credentials used for deployment.

Answer

Granting 'Admin' privileges to all developers on the CI/CD server.

Answer

Storing pipeline secrets in plain text within the Jenkinsfile.

Question 20

Which TWO methods are effective in hardening the production environment against 'Zero-Day' vulnerabilities?

Accepted Answer

Implementing granular network segmentation to limit lateral movement.. Defense-in-depth through runtime application self-protection (RASP) and strict network segmentation provides layered security against unknown threats.

Answer

Disabling all security logging to prevent alert fatigue.

Answer

Relying solely on perimeter-based firewalls for security.

Answer

Updating the application to the latest version once per year.