CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ175

Secure Software Concepts

Which of the following describe the fundamental characteristics of declarative security? Each correct answer is a complete solution. Choose all that apply.

Choose three
  • A It is a container-managed security.
  • B It has a runtime environment.
  • C All security constraints are stated in the configuration files.
  • D The security policies are applied at the deployment time.
Explanation

Declarative security is container-managed security in which security requirements are expressed externally through deployment or configuration descriptors rather than enforced by application code. The deployer applies those declared policies at deployment, and the container enforces them when the application runs.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!