Crucial Exams

ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

During an architectural review of a new analytics cluster, you are asked to guarantee that system administrators can reach the nodes even if the production network is under active attack or mis-configured. Which design decision BEST meets this secure interface requirement?

  • Permit SSH to the existing production interface but restrict access to the data-center IP range with firewall rules.

  • Enable serial console logging on all servers so that administrators can view output if the network fails.

  • Provide each node with a separate network interface cabled to a physically isolated management VLAN that is reachable solely through a VPN requiring multi-factor authentication.

  • Expose an HTTPS-based management REST API on the public load balancer and protect it with a long, random API key.

ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Architecture and Design
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot