ISC2 Certified Secure Software Lifecycle Professional (CSSLP) Practice Question

Your team stores deployment scripts on a Linux server. Requirements are as follows:

  • Junior engineers may view the script contents but must not change or run them.
  • Senior engineers must be able to read and update the scripts, but they do not need to execute them directly.
  • A continuous-integration (CI) service account must run the scripts during automated builds.

Which UNIX permission set applied at the group level best meets the least-privilege goal while allowing all parties to perform their tasks?

  • Junior engineers r--, senior engineers rw-, CI service --x

  • Junior engineers r-x, senior engineers rw-, CI service r-x

  • Grant all three groups rwx on the scripts

  • Junior engineers r--, senior engineers rw-, CI service r-x

ISC2 Certified Secure Software Lifecycle Professional (CSSLP)
Secure Software Concepts
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Bash, the Crucial Exams Chat Bot
AI Bot