SSCP Exam Questions

What is the PRIMARY goal of incident handling?

Which of the following outlined how senior management are responsible for the computer and information security decisions that they make and what actually took place within their o...

What is the PRIMARY reason to maintain the chain of custody on evidence that has been collected?

Which of the following would BEST be defined as an absence or weakness of safeguard that could be exploited?

Which of the following could be BEST defined as the likelihood of a threat agent taking advantage of a vulnerability?

Which approach to a security program ensures people responsible for protecting the company's assets are DRIVING the program?

Which of the following is NOT a part of a risk analysis?

How should a risk be HANDLED when the cost of the countermeasure OUTWEIGHS the cost of the risk?

What would BEST define risk management?

What is the highest amount a company should spend annually on countermeasures for protecting an asset valued at $1,000,000 from a threat that has an annualized rate of occurrence (...

Which of the following statements pertaining to quantitative risk analysis is false?

Notifying the appropriate parties to take action in order to determine the extent of the severity of an incident and to remediate the incident's effects is part of:

An Intrusion Detection System (IDS) is what type of control?

To protect and/or restore lost, corrupted, or deleted information, thereby preserving the data integrity and availability is the purpose of:

Which of the following is NOT a task normally performed by a Computer Incident Response Team (CIRT)?

Which of the following is NOT a common backup method?

Which backup method only copies files that have been recently added or changed and also leaves the archive bit unchanged?

Which backup method does not reset the archive bit on files that are backed up?

Which common backup method is the fastest on a daily basis?

Which of the following backup methods is most appropriate for off-site archiving?

Which of the following tasks is NOT usually part of a Business Impact Analysis (BIA)?

Which of the following is an example of an active attack?

What can be defined as a momentary low voltage?

The absence of a safeguard, or a weakness in a system that may possibly be exploited is called a(n)?

Which of the following statements pertaining to disk mirroring is incorrect?

Which of the following is NOT a common category/classification of threat to an IT system?

Which of the following enables the person responsible for contingency planning to focus risk management efforts and resources in a prioritized manner only on the identified risks?

A contingency plan should address:

Which of the following focuses on sustaining an organization's business functions during and after a disruption?

Which of the following specifically addresses cyber attacks against an organization's IT systems?

In which of the following phases of system development life cycle (SDLC) is contingency planning most important?

Which of the following teams should NOT be included in an organization's contingency plan?

Which of the following statements pertaining to the maintenance of an IT contingency plan is incorrect?

Which of the following is less likely to accompany a contingency plan, either within the plan itself or in the form of an appendix?

Which of the following server contingency solutions offers the highest availability?

What assesses potential loss that could be caused by a disaster?

Which of the following item would best help an organization to gain a common understanding of functions that are critical to its survival?

What can be defined as the maximum acceptable length of time that elapses before the unavailability of the system severely affects the organization?

Which of the following steps should be one of the first step performed in a Business Impact Analysis (BIA)?

A business continuity plan should list and prioritize the services that need to be brought back after a disaster strikes. Which of the following services is more likely to be of pr...

During the salvage of the Local Area Network and Servers, which of the following steps would normally be performed first?

Which of the following rules pertaining to a Business Continuity Plan/Disaster Recovery Plan is incorrect?

A Business Continuity Plan should be tested:

Which of the following statements pertaining to a Criticality Survey is incorrect?

Which disaster recovery plan test involves functional representatives meeting to review the plan in detail?

The criteria for evaluating the legal requirements for implementing safeguards is to evaluate the cost (C) of instituting the protection versus the estimated loss (L) resulting fro...

What is called an exception to the search warrant requirement that allows an officer to conduct a search without having the warrant in-hand if probable cause is present and destruc...

A copy of evidence or oral description of its contents; which is not as reliable as best evidence is what type of evidence?

Which of the following proves or disproves a specific act through oral testimony based on information gathered through the witness's five senses?

This type of supporting evidence is used to help prove an idea or a point, however It cannot stand on its own, it is used as a supplementary tool to help prove a primary piece of e...