ISC System Security Certified Practitioner (SSCP)

QUESTION NO: 1
When considering an IT System Development Life-cycle, security should be:

A. Added once the design is completed. B. Mostly considered during the development phase. C. Treated as an integral part of the overall system design. D. Mostly considered during the initiation phase.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 2
Cryptography does NOT help in:

A. Detecting fraudulent insertion. B. Detecting fraudulent deletion. C. Detecting fraudulent modification. D. Detecting fraudulent disclosure.

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 3
Which of the following services relies on UDP?

A. DNS B. SMTP C. Telnet D. FTP

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 4
Which of the following is an advantage that UDP has over TCP?

A. UDP makes a better effort to deliver packets. B. UDP is connection-oriented whereas TCP is not. C. UDP is faster than TCP. D. UDP is more reliable than TCP.

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 5
Wiretapping is an example of a passive network attack?

A. True B. False

Correct Answer: A

QUESTION NO: 6
A weakness or lack of a safeguard, which may be exploited by a threat, causing harm to the information systems or networks is called a?

A. Threat B. Overflow C. Vulnerability D. Risk

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 7
The difference between fraud and embezzlement is ________________-.

A. Fraud = removing hardware / software; embezzlement = removing data only B. Embezzlement is about publicity; fraud is about personal gain C. Fraud = misdemeanor; embezzlement = felony D. Fraud = money or goods; embezzlement = money only E. There is nodifference, fraud and embezzlement are the same

Correct Answer: D

QUESTION NO: 8
Which of the following is NOT a symmetric key algorithm?

A. RC5 B. Blowfish C. Digital Signature Standard (DSS) D. Triple DES (3DES)

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 9
Which of the following is an Internet IPsec protocol to negotiate, establish, modify, and delete security associations, and to exchange key generation and authentication data, independent of the details of any specific key generation technique, key establishment protocol, encryption algorithm, or authentication mechanism?

A. IPsec Key exchange (IKE) B. Simple Key-management for Internet Protocols (SKIP) C. Internet Security Association and Key Management Protocol (ISAKMP) D. OAKLEY

Correct Answer: C

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 10
Which of the following type of cryptography is used when both parties use the same key to communicate securely with each other?

A. PKI - Public Key Infrastructure B. Symmetric Key Cryptography C. Diffie-Hellman D. DSS - Digital Signature Standard

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 11
The primary service provided by Kerberos is which of the following?

A. non-repudiation B. authentication C. confidentiality D. authorization

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 12
Who can best decide what are the adequate technical security controls in a computer-based application system in regards to the protection of the data being used, the criticality of the data, and it's sensitivity level ?

A. System Auditor B. Data or Information Owner C. Data or Information user D. System Manager

Correct Answer: B

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 13
Which of the following is addressed by Kerberos?

A. Confidentiality and Integrity B. Authentication and Availability C. Validation and Integrity D. Auditability and Integrity

Correct Answer: A

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

QUESTION NO: 14
A virus is considered to be "in the ______ " if it has been reported as replicating and causing harm to computers.

A. Cage B. Jungle C. Zoo D. Fire E. Wild

Correct Answer: E

QUESTION NO: 15
Which of the following statements relating to the Bell-LaPadula security model is FALSE (assuming the Strong Star property is not being used) ?

A. It is restricted to confidentiality. B. A subject is not allowed to read up. C. The property restriction can be escaped by temporarily downgrading a high level subject. D. A subject is not allowed to read down.

Correct Answer: D

Explanation: Only visible for Pass4Test members. You can sign-up / login (it's free).

ISC System Security Certified Practitioner (SSCP) - SSCP Exam Questions