Learn as you go
Choose an answer, reveal the key, and review available explanations, citations and candidate context.
25 questions free
Start guided practiceSecurity across the software lifecycle: secure requirements, architecture and design, implementation, testing, deployment and operations, and securing the software supply chain.
ISC2 does not publish numeric exam codes — CSSLP is the common abbreviation.
ISC2 Certified Secure Software Lifecycle Professional is ISC2's professional-level software development certification, referred to across the industry by the shorthand CSSLP. The exam runs for 4 hours and presents up to 125 questions, with a pass mark of 700 / 1000 (scaled). It costs US$599 at the standard rate.
ISC2 publishes the syllabus as 8 weighted domains. Secure Software Lifecycle Management carries the most weight at 14%, and the three largest domains together account for roughly 42% of the scored content — worth knowing before you decide where study time goes.
Confirm these details on the official ISC2 page before booking — vendors adjust format and pricing without notice.
Some forms include unscored trial questions
Standard rate, before local taxes
The published exam guide for CSSLP, in the vendor's own order.
01Secure Software Concepts
10%02Secure Software Lifecycle Management
14%03Secure Software Requirements
14%04Secure Software Architecture and Design
14%05Secure Software Implementation
14%06Secure Software Testing
14%07Secure Software Deployment, Operations and Maintenance
12%08Secure Software Supply Chain
8%Four years of software development lifecycle experience in one or more domains.
Professional level — Advanced credentials covering design, scale and trade-off decisions.
Preview 25 supported questions before unlocking the 171-question CSSLP bank.
Community-contributedCompiled from publicly posted community exam discussions. Contributed by third parties rather than written here, so accuracy varies and most items carry no explanation. Progress and bookmarks stay in this browser.
Answer support: 163 explanations, 171 questions with candidate context and 2 questions with direct citations. Bank updated .
Choose an answer, reveal the key, and review available explanations, citations and candidate context.
25 questions free
Start guided practiceKeep answers hidden on the clock and review every miss only after you finish the public sample.
Free sample mock
Open timed mockWant the complete 171-question bank?
One Exam Pass unlocks this selected bank for 12 months with no renewal.
Compiled from exam discussions posted publicly by other people on ExamTopics. Copyright in each contribution rests with its original author; it is reproduced here for study. Not verified by us — most items carry no explanation. To request removal, see our content policy.
ISC2 lists up to 125 questions, to be completed in 4 hours. Question counts can vary slightly between exam forms, and unscored trial questions are sometimes included.
700 / 1000 (scaled). Confirm the current figure on the official exam page before booking, as vendors adjust cut scores when an exam form is refreshed.
The standard price is US$599. Local pricing, taxes and any retake policy vary by region, so check the official page for the figure that applies to you.
Four years of software development lifecycle experience in one or more domains.
The exam guide covers Secure Software Concepts, Secure Software Lifecycle Management, Secure Software Requirements, Secure Software Architecture and Design and Secure Software Implementation, plus 3 further domains. The full weighted breakdown is listed above.
Yes — this exam has 171 practice questions available here, each with the correct answer marked. They are community-contributed, compiled from exam discussions posted publicly by other people rather than written here, and most do not carry an explanation.