ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

During an architecture review for a self-service payment kiosk, you must identify components that form the Trusted Computing Base. Which component should you include because it is critical to enforcing the kiosk's overall security policy?

  • The external digital signage monitor connected via HDMI

  • The kernel-mode cryptographic library that validates the firmware's digital signature at boot time

  • The back-office inventory database server that later receives transaction logs

  • The optional customer-facing video advertisement player executing in user space

ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Architecture and Design
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot