CSSLP: Certified Secure Software Lifecycle ProfessionalDemo

By ISC · Question Mode

QuestionQ221

Secure Software Requirements

Which of the following elements establishes a requirement that constrained requests be received over a protected-layer connection, such as TLS (Transport Layer Security)?

  • A User data constraint
  • B Authorization constraint
  • C Web resource collection
  • D Accounting constraint
Explanation

A user-data constraint specifies the required transport guarantee for constrained web requests. A CONFIDENTIAL transport guarantee requires the container to protect the connection, typically by using TLS.

Community Discussion

No comments yet. Be the first to start the discussion!