Crucial Exams

ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

During an architecture review of a ride-sharing mobile app, you notice the client uploads raw GPS coordinates every five seconds, even when running in the background, to pre-match available rides. Which architectural change most effectively mitigates privacy risks associated with this implicit data collection while still allowing the feature to function?

  • Perform on-device processing of GPS data and send only coarse, tokenized area identifiers needed for ride matching.

  • Route location uploads through a separate, dedicated API gateway isolated from other services.

  • Increase retention of uploaded location records to 90 days to support analytics and fraud investigations.

  • Protect the GPS payload with TLS 1.3 encryption during transmission to the backend.

ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Architecture and Design
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot