ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question
Your organization is retiring a public-facing application. The hosts have been powered off, and you are now executing the configuration removal step defined in the End-of-Life policy. Which action most directly prevents any new network traffic from reaching the decommissioned service?
Remove the application's service account credentials from the secrets management system.
Export the production database to cold storage and disable automated backups.
Rotate and archive all TLS certificates associated with the application's domain.
Delete any firewall or security group rules that allow inbound HTTP/HTTPS to the application's IP address.
Configuration removal focuses on eliminating infrastructure settings that could continue exposing a retired application. Deleting the firewall or security group rules that allowed inbound HTTP/HTTPS traffic breaks the final network path to the service, ensuring no new connections are possible. Rotating TLS certificates, removing credentials from a secrets vault, or exporting the database are important EOL activities, but they address certificate management, credential hygiene, and data retention-not the network configurations that keep the service reachable. Therefore, removing the firewall rules (or equivalent security group entries) is the action that fulfills the configuration removal requirement.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is a firewall and how does it block network traffic?
Open an interactive chat with Bash
How do security group rules differ from firewall rules?
Open an interactive chat with Bash
What is the purpose of configuration removal during application end-of-life?
Open an interactive chat with Bash
ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Lifecycle Management
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .