ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
During a secure design review, several agile teams disagree on the meaning and sensitivity level of the field customer_id, which appears in multiple services and databases. To quickly reach an authoritative decision and ensure uniform protection requirements, which artifact should the security architect consult?
The security requirement traceability matrix linking controls to test cases
The organization's centralized data dictionary that lists each element's definition and classification label
The entity-relationship diagram illustrating table relationships across the services
The corporate data retention schedule describing record-keeping periods
A centralized data dictionary stores the authoritative definition, format, and security classification for each data element used by an organization. By consulting it, the architect can confirm what customer_id represents and what confidentiality level applies, enabling consistent controls across all components. An entity-relationship diagram shows structural relationships but not necessarily classifications or definitions. A retention schedule specifies how long data is kept, not its meaning. A security requirement traceability matrix links requirements to design and test artifacts but does not define individual data elements.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a centralized data dictionary?
Open an interactive chat with Bash
How does a centralized data dictionary improve security design?
Open an interactive chat with Bash
Why is an entity-relationship diagram not sufficient for determining data sensitivity?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Requirements
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .