ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
Your development group is replacing its ad-hoc email approach with an issue tracker dedicated to security defects. To align with formal bug-tracking best practices and support future audits, which tracker configuration is most critical for maintaining end-to-end accountability for every vulnerability from discovery through release?
Permit reporters to edit original descriptions so details stay current as understanding evolves.
Configure the system to automatically close any security issue that has no updates after 30 days.
Assign an immutable, unique defect identifier that must be referenced in all related commits, tests, and release documents.
Make the severity field optional so teams can decide when it is relevant to classify an issue.
A permanent, non-reusable identifier assigned when a security issue is first recorded allows every later activity-code commits, test cases, change-control records, and release notes-to reference the same record. This single thread enables auditors and project staff to trace how the vulnerability was confirmed, prioritized, fixed, tested, and deployed. Simply generating e-mail alerts, setting arbitrary time-outs, or letting reporters omit severity data do not by themselves provide the immutable linkage needed for comprehensive tracking and compliance evidence.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
Why is assigning a unique defect identifier critical for tracking vulnerabilities?
Open an interactive chat with Bash
What makes an identifier 'immutable' and why is this important?
Open an interactive chat with Bash
How does a security issue tracker facilitate audits and compliance reporting?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Testing
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .