350 practice questions for ISC2 Certified Secure Software Lifecycle Professional (CSSLP), with full explanations.
Every question comes with the correct answer, the reasoning behind it, and a short note on why each wrong option is wrong, across all eight CSSLP domains.
- 350 questions across all eight CSSLP domains
- Answers and explanations for every question, including the wrong options
- A questions-only PDF for timed practice runs
- Instant delivery by email the moment you check out
- Free monthly updates for as long as the exam is live
- Pass or your money back
A CSSLP attempt costs US$599. This pack is US$39, paid once, and refunded if you fail.
Try 10 questions free before you buy.
Last updated September 2026 · 350 questions
What makes the CSSLP hard
It is ISC2 thinking applied to software, so the technically correct answer often loses to the one that follows the process. Developers expect a secure coding quiz and find a lifecycle governance exam instead.
The eight domains follow the SDLC from start to finish: security requirements and misuse cases, threat modelling in design, secure coding and how it is verified, testing strategy, and the domain that catches most people out, supply chain, from third-party components to SBOMs. Throughout, expect the familiar ISC2 pattern of two defensible answers, where the preferred one manages risk earliest and most systematically.
The weighting is unusually even. No domain is under 10% or over 15%, so nothing can safely be skipped. Architecture and design is the largest at 15%, with implementation and testing at 14% each.
About the exam
CSSLP certifies building security into the whole software lifecycle: requirements, design, implementation, testing, deployment and supply chain. It requires 4 years of SDLC experience (or 3 with a relevant degree, and an Associate route is available). Valid for three years, with CPE credits and an annual maintenance fee.
Exam domains
- Secure software concepts: 12%
- Secure software lifecycle management: 11%
- Secure software requirements: 13%
- Secure software architecture and design: 15%
- Secure software implementation: 14%
- Secure software testing: 14%
- Secure software deployment, operations and maintenance: 11%
- Secure software supply chain: 10%
125 questions, 3 hours, multiple choice and advanced item types, pass mark 700 out of 1000, US$599 per attempt, at a Pearson VUE centre, valid for three years.
Reviews
There are no reviews yet.