CSSLP Secure Software Supply Chain Practice Question
To protect against a compromised build pipeline, which TWO of the following configurations should be implemented to ensure 'Hermetic Builds'?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Disable network access during the build process.
Hermetic builds require that all dependencies are declared and pinned, and that the build environment has no network access to avoid fetching unauthorized external dependencies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Enable verbose logging to standard output.
Why it's wrong here
Logging is for observability, not build integrity.
- ✗
Automatically pull the latest compiler version.
Why it's wrong here
This violates the principle of reproducibility.
- ✓
Disable network access during the build process.
Why this is correct
Prevents unauthorized fetching of dependencies or exfiltration.
- ✓
Use pinned dependencies with cryptographic hashes.
Why this is correct
Ensures the build is reproducible and predictable.
- ✗
Allow developers to trigger manual builds via SSH.
Why it's wrong here
Manual intervention breaks the hermetic model.
About these practice questions
Courseiva writes every CSSLP question from scratch — 198 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed August 2026 · checked against the official (ISC)² exam blueprint
This CSSLP practice question is part of Courseiva's free (ISC)² certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CSSLP exam.