OpenExamsFREE PRACTICE — ANY EXAM

Certified Secure Software Lifecycle Professional (CSSLP) — Information & Free Practice

US · Examination information

200 free questions · Answer explanations · No signup required

Start free practice →

Certified Secure Software Lifecycle Professional (CSSLP)

Provider
Pearson VUE Testing Center
Format
Computer-based examination; multiple choice and advanced item types; English
Exam questions
Total questions: 125.
Time limit
3 hours
Passing score
700 out of 1000 points
Examination outline
  • Secure Software Concepts (12%)
    • Understand core concepts
    • Understand security design principles
  • Secure Software Lifecycle Management (11%)
    • Manage security within a software development methodology
    • Identify and adopt security standards
    • Outline strategy and roadmap
    • Define and develop security documentation
    • Define security metrics
    • Decommission applications
    • Create security reporting mechanisms
    • Incorporate integrated risk management methods
    • Implement secure operation practices
  • Secure Software Requirements (13%)
    • Define software security requirements
    • Identify compliance requirements
    • Identify data classification requirements
    • Identify privacy requirements
    • Define data access provisioning
    • Develop misuse and abuse cases
    • Develop security requirement traceability matrix
    • Define third-party vendor security requirements
  • Secure Software Architecture and Design (15%)
    • Define the security architecture
    • Perform secure interface design
    • Evaluate and select reusable technologies
    • Perform threat modeling
    • Perform architectural risk assessment and design reviews
    • Model (non-functional) security properties and constraints
    • Define secure operational architecture
  • Secure Software Implementation (14%)
    • Adhere to relevant secure coding practices
    • Analyze code for security risks
    • Implement security controls
    • Address the identified security risks
    • Evaluate and integrate components
    • Apply security during the build process
  • Secure Software Testing (14%)
    • Develop security testing strategy & plan
    • Develop security test cases
    • Verify and validate documentation
    • Identify undocumented functionality
    • Analyze security implications of test results
    • Classify and track security errors
    • Secure test data
    • Perform verification and validation testing
  • Secure Software Deployment, Operations, Maintenance (11%)
    • Perform operational risk analysis
    • Secure configuration and version control
    • Release software securely
    • Store and manage security data
    • Ensure secure installation
    • Obtain security approval to operate
    • Perform information security continuous monitoring
    • Execute the incident response plan
    • Perform patch management
    • Perform vulnerability management
    • Incorporate runtime protection
    • Support continuity of operations
    • Integrate service level objectives and service-level agreements
  • Secure Software Supply Chain (10%)
    • Implement software supply chain risk management
    • Analyze security of third-party software
    • Verify pedigree and provenance
    • Ensure and verify supplier security requirements in the acquisition process
    • Support contractual requirements
Examination sources

Related license preparation

This examination may be required or accepted as an alternative, depending on the license and application pathway.