SSCP Exam Questions

To understand the 'whys' in crime, many times it is necessary to understand MOM. Which of the following is not a component of MOM?

In the statement below, fill in the blank: Law enforcement agencies must get a warrant to search and seize an individual's property, as stated in the _____ Amendment.

Controls are implemented to:

What can be described as a measure of the magnitude of loss or impact on the value of an asset?

Computer security should be first and foremost which of the following:

Which of the following best allows risk management results to be used knowledgeably?

What can be best defined as the examination of threat sources against system vulnerabilities to determine the threats for a particular system in a particular operational environmen...

The first step in the implementation of the contingency plan is to perform:

The MOST common threat that impacts a business's ability to function normally is:

Failure of a contingency plan is usually:

Within the legal domain what rule is concerned with the legality of how the evidence was gathered ?

Computer-generated evidence is considered:

Which of the following would be MOST important to guarantee that the computer evidence will be admissible in court?

Which of the following would best describe secondary evidence?

Why would a memory dump be admissible as evidence in court?

Which type of attack would a competitive intelligence attack best classify as?

Which of the following is an advantage of a qualitative over a quantitative risk analysis?

What is defined as inference of information from other, intermediate, relevant facts?

Under the Business Exemption Rule to the hearsay evidence, which of the following exceptions would have no bearing on the inadmissibility of audit logs and audit trails in a court...

Which of the following categories of hackers poses the greatest threat?

Which of the following best defines a Computer Security Incident Response Team (CSIRT)?

Under the principle of culpable negligence, executives can be held liable for losses that result from computer system breaches if:

The deliberate planting of apparent flaws in a system for the purpose of detecting attempted penetrations or confusing an intruder about which flaws to exploit is called:

Which element must computer evidence have to be admissible in court?

For which areas of the enterprise are business continuity plans required?

Which of the following will a Business Impact Analysis NOT identify?

What is a hot-site facility?

Which of the following best describes remote journaling?

All of the following can be considered essential business functions that should be identified when creating a Business Impact Analysis (BIA) except one. Which of the following woul...

Of the following, which is NOT a specific loss criteria that should be considered while developing a BIA?

Of the reasons why a Disaster Recovery plan gets outdated, which of the following is not true?

Which backup type run at regular intervals would take the least time to complete?

What is electronic vaulting?

After a company is out of an emergency state, what should be moved back to the original site first?

How often should tests and disaster recovery drills be performed?

Business Continuity Planning (BCP) is not defined as a preparation that facilitates:

Which of the following is true about Kerberos?

The RSA algorithm is an example of what type of cryptography?

Kerberos depends upon what encryption method?

The DES algorithm is an example of what type of cryptography?

Which of the following encryption methods is known to be unbreakable?

What algorithm was DES derived from?

What is a characteristic of using the Electronic Code Book mode of DES encryption?

Where parties do not have a shared secret and large quantities of sensitive information must be passed, the most efficient means of transferring information is to use Hybrid Encryp...

Public Key Infrastructure (PKI) uses asymmetric key encryption between parties. The originator encrypts information using the intended recipient's "public" key in order to get conf...

Which of the following statements is true about data encryption as a method of protecting data?

Which type of algorithm is considered to have the highest strength per bit of key length of any of the asymmetric algorithms?

How many bits is the effective length of the key of the Data Encryption Standard algorithm?

The primary purpose for using one-way hashing of user passwords within a password file is which of the following?

Which of the following issues is not addressed by digital signatures?