SSCP Exam Training Practice Tests (ISC System Security Certified Practitioner (SSCP))]

Question 1

Which of the following is the WEAKEST authentication mechanism?

A. Passwords B. Passphrases C. Token devices D. One-time passwords

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 2

What term describes the amount of risk that remains after the countermeasures have been deployed and the vulnerabilities classified?

A. Terminal risk B. Residual risk C. Infinite risk D. Imminent risk

Correct Answer: B

Question 3

A code, as is pertains to cryptography:

A. Is specific to transposition ciphers. B. Deals with linguistic units. C. Is a generic term for encryption. D. Is specific to substitution ciphers.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 4

Which of the following Intrusion Detection Systems (IDS) uses a database of attacks, known system vulnerabilities, monitoring current attempts to exploit those vulnerabilities, and then triggers an alarm if an attempt is found?

A. Application-Based ID System B. Knowledge-Based ID System C. Network-Based ID System D. Host-Based ID System

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 5

The communications products and services, which ensure that the various components of a network (such as devices, protocols, and access methods) work together refers to:

A. WAN Architecture. B. Multiprotocol Architecture. C. Network Architecture. D. Netware Architecture.

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 6

Which device acting as a translator is used to connect two networks or applications from layer 4 up to layer 7 of the ISO/OSI Model?

A. Router B. Gateway C. Bridge D. Repeater

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 7

When considering an IT System Development Life-cycle, security should be:

A. Mostly considered during the initiation phase. B. Mostly considered during the development phase. C. Added once the design is completed. D. Treated as an integral part of the overall system design.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 8

Although it is considered a low tech attack ____________ is still a very effective way of gaining unauthorized access to network systems.

A. Eavesdropping B. None of the items are correct C. Shoulder Surfing D. Social Engineering E. Sniffing

Correct Answer: D

Question 9

Which of the following forms of authentication would most likely apply a digital signature algorithm to every bit of data that is sent from the claimant to the verifier?

A. Dynamic authentication B. Robust authentication C. Encrypted authentication D. Continuous authentication

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 10

Identification and authentication are the keystones of most access control systems.
Identification establishes:

A. Authentication for actions on the system B. User accountability for the actions on the system. C. Top management accountability for the actions on the system. D. EDP department accountability for the actions of users on the system.

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 11

In the UTP category rating, the tighter the wind:

A. the longer the rating and its resistance against interference and attenuation. B. the shorter the rating and its resistance against interference and attenuation. C. the slower the rating and its resistance against interference and attenuation. D. the higher the rating and its resistance against interference and crosstalk.

Correct Answer: D

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 12

Contracts and agreements are often times unenforceable or hard to enforce in which of the following alternate facility recovery agreement?

A. reciprocal agreement B. warm site C. hot site D. cold site

Correct Answer: A

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 13

Which one of the following factors is NOT one on which Authentication is based?

A. Type 2. Something you have, such as an ATM card or smart card B. Type 1. Something you know, such as a PIN or password C. Type 4. Something you are, such as a system administrator or security administrator D. Type 3. Something you are (based upon one or more intrinsic physical or behavioral traits), such as a fingerprint or retina scan

Correct Answer: C

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

Question 14

Which of the following cryptographic attacks describes when the attacker has a copy of the plaintext and the corresponding ciphertext?

A. ciphertext only B. known plaintext C. chosen plaintext D. brute force

Correct Answer: B

Explanation: Only visible for TrainingDump members. You can sign-up / login (it's free).

ISC System Security Certified Practitioner (SSCP) - SSCP Exam Practice Test