Crucial Exams

ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

An e-commerce platform regularly experiences volumetric UDP reflection floods that saturate its Internet uplink, causing outages despite secure coding and WAF rules. Which additional control will most effectively improve operational resiliency against this type of Denial-of-Service attack?

  • Require CAPTCHA challenges on all authentication and checkout pages

  • Enable HTTP Strict Transport Security (HSTS) with a one-year max-age directive

  • Route inbound traffic through an anycast-based cloud DDoS scrubbing service

  • Configure per-IP rate limiting in the web server

ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Deployment, Operations, Maintenance
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot