ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
During system testing of a newly built payroll application, the team must confirm that only members of the HR role can view employees' Social Security numbers and that access is denied to all other roles. Which type of security testing technique should be selected to verify this requirement?
The objective is to confirm that the software's role-based access control works exactly as specified. This is a classic example of functional security testing, which exercises security features such as authentication, authorization, and session management to ensure they perform their intended functions. Load or stress tests focus on performance characteristics, while fuzz or fault-injection tests target robustness, not specific access-control logic. Therefore, functional security testing is the appropriate choice.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is functional security testing?
Open an interactive chat with Bash
What is role-based access control (RBAC)?
Open an interactive chat with Bash
How does functional security testing differ from load testing?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Testing
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .