Crucial Exams

ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

During an architectural risk assessment of a new microservices-based e-commerce platform, you notice that every service connects to the same relational database through a single, highly privileged service account, and only the API gateway enforces authentication. Which architectural change will best correct the violation of the least-privilege principle and limit lateral movement if one service is compromised?

  • Keep the shared account but add a centralized connection pool at the gateway to manage database sessions more efficiently.

  • Deploy a network intrusion detection system between the API gateway and database to spot suspicious queries from services.

  • Give every microservice a separate database schema and credentials limited to its required tables and operations.

  • Move authentication from the API gateway into each microservice while continuing to use the shared privileged database account.

ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Architecture and Design
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot