SSCP Exam Questions

Which of the following would assist the most in Host Based intrusion detection?

Controls to keep password sniffing attacks from compromising computer systems include which of the following?

Kerberos can prevent which one of the following attacks?

In discretionary access environments, which of the following entities is authorized to grant information access to other people?

What is the main concern with single sign-on?

Who developed one of the first mathematical models of a multilevel-security computer system?

A department manager has read access to the salaries of the employees in his/her department but not to the salaries of employees in other departments. A database security mechanism...

Which of the following attacks could capture network user passwords?

Which of the following would constitute the best example of a password to use for access to a system by a network administrator?

The number of violations that will be accepted or forgiven before a violation record is produced is called which of the following?

Guards are appropriate whenever the function required by the security program involves which of the following?

What physical characteristic does a retinal scan biometric device measure?

Which is the last line of defense in a physical security sense?

The Computer Security Policy Model the Orange Book is based on is which of the following?

The end result of implementing the principle of least privilege means which of the following?

Which of the following is the most reliable authentication method for remote access?

Which of the following is the most reliable, secure means of removing data from magnetic storage media such as a magnetic tape, or a cassette?

The Orange Book is founded upon which security policy model?

Which of the following is true of two-factor authentication?

The primary service provided by Kerberos is which of the following?

There are parallels between the trust models in Kerberos and Public Key Infrastructure (PKI). When we compare them side by side, Kerberos tickets correspond most closely to which o...

Which of the following is NOT a system-sensing wireless proximity card?

Which of the following is NOT a type of motion detector?

Which of the following is NOT a technique used to perform a penetration test?

In which of the following model are Subjects and Objects identified and the permissions applied to each subject/object combination are specified. Such a model can be used to quickl...

In which of the following security models is the subject's clearance compared to the object's classification such that specific rules can be applied to control how the subject-to-o...

Which of the following classes is the first level (lower) defined in the TCSEC (Orange Book) as mandatory protection?

Which of the following classes is defined in the TCSEC (Orange Book) as discretionary protection?

Which of the following division is defined in the TCSEC (Orange Book) as minimal protection?

Which of the following was developed by the National Computer Security Center (NCSC) for the US Department of Defense ?

Which of the following was developed to address some of the weaknesses in Kerberos and uses public key cryptography for the distribution of secret keys and provides additional acce...

Single Sign-on (SSO) is characterized by which of the following advantages?

The "vulnerability of a facility" to damage or attack may be assessed by all of the following except:

What is the primary role of smartcards in a PKI?

What kind of certificate is used to validate a user identity?

Which of the following is not a physical control for physical security?

Crime Prevention Through Environmental Design (CPTED) is a discipline that:

The following is NOT a security characteristic we need to consider while choosing a biometric identification systems:

In biometric identification systems, at the beginning, it was soon apparent that truly positive identification could only be based on :

In biometric identification systems, at the beginning, it was soon apparent that truly positive identification could only be based on physical attributes of a person. This raised t...

In biometric identification systems, the parts of the body conveniently available for identification are:

Controlling access to information systems and associated networks is necessary for the preservation of their:

Controls like guards and general steps to maintain building security, securing of server rooms or laptops, the protection of cables, and usage of magnetic switches on doors and win...

To control access by a subject (an active entity such as individual or process) to an object (a passive entity such as a file) involves setting up:

Rule-Based Access Control (RuBAC) access is determined by rules. Such rules would fit within what category of access control ?

The type of discretionary access control (DAC) that is based on an individual's identity is also called:

Which access control type has a central authority that determine to what objects the subjects have access to and it is based on role or on the organizational security policy?

What is called the type of access control where there are pairs of elements that have the least upper bound of values and greatest lower bound of values?

Which of the following control pairing places emphasis on "soft" mechanisms that support the access control objectives?

Which of the following control pairings include: organizational policies and procedures, pre- employment background checks, strict hiring practices, employment agreements, employee...