SSCP Exam Questions

Which of the following encryption algorithms does not deal with discrete logarithms?

Which of the following statements pertaining to message digests is incorrect?

Which type of attack is based on the probability of two different messages using the same hash function producing a common message digest?

Which of the following elements is NOT included in a Public Key Infrastructure (PKI)?

Which of the following was developed in order to protect against fraud in electronic fund transfers (EFT) by ensuring the message comes from its claimed originator and that it has...

Which of the following statements pertaining to Secure Sockets Layer (SSL) is false?

What is the name of the protocol use to set up and manage Security Associations (SA) for IP Security (IPSec)?

Which of the following binds a subject name to a public key value?

What can be defined as a digital certificate that binds a set of descriptive data items, other than a public key, either directly to a subject name or to the identifier of another...

What can be defined as a data structure that enumerates digital certificates that were issued to CAs but have been invalidated by their issuer prior to when they were scheduled to...

What is the name of the third party authority that vouches for the binding between the data items in a digital certificate?

What enables users to validate each other's certificate when they are certified under different certification hierarchies?

Which of the following would best define a digital envelope?

What can be defined as a value computed with a cryptographic algorithm and appended to a data object in such a way that any recipient of the data can use the signature to verify th...

Which of the following can be best defined as computing techniques for inseparably embedding unobtrusive marks or labels as bits in digital data and for detecting or extracting the...

Which of the following is an Internet IPsec protocol to negotiate, establish, modify, and delete security associations, and to exchange key generation and authentication data, inde...

Which of the following is defined as a key establishment protocol based on the Diffie-Hellman algorithm proposed for IPsec but superseded by IKE?

Which of the following is defined as an Internet, IPsec, key-establishment protocol, partly based on OAKLEY, that is intended for putting in place authenticated keying material for...

Which of the following can best be defined as a key distribution protocol that uses hybrid encryption to convey session keys. This protocol establishes a long-term key once, and th...

Which of the following can best be defined as a cryptanalysis technique in which the analyst tries to determine the key from knowledge of some plaintext-ciphertext pairs?

Which of the following is NOT a property of a one-way hash function?

The Data Encryption Algorithm performs how many rounds of substitution and permutation?

Which of the following statements is most accurate regarding a digital signature?

The computations involved in selecting keys and in enciphering data are complex, and are not practical for manual use. However, using mathematical properties of modular arithmetic...

Which of the following concerning the Rijndael block cipher algorithm is false?

This type of attack is generally most applicable to public-key cryptosystems, what type of attack am I ?

What is NOT true about a one-way hashing function?

You work in a police department forensics lab where you examine computers for evidence of crimes. Your work is vital to the success of the prosecution of criminals. One day you rec...

When we encrypt or decrypt data there is a basic operation involving ones and zeros where they are compared in a process that looks something like this: 0101 0001 Plain text 0111 0...

Which type of encryption is considered to be unbreakable if the stream is truly random and is as large as the plaintext and never reused in whole or part?

Which of the following answers is described as a random value used in cryptographic algorithms to ensure that patterns are not created during the encryption process?

Which of the following terms can be described as the process to conceal data into another file or media in a practice known as security through obscurity?

Which of the following type of cryptography is used when both parties use the same key to communicate securely with each other?

Complete the blanks. When using PKI, I digitally sign a message using my ______ key. The recipient verifies my signature using my ______ key.

Which of the following BEST describes a function relying on a shared secret key that is used along with a hashing algorithm to verify the integrity of the communication content as...

Which of the following type of traffic can easily be filtered with a stateful packet filter by enforcing the context or state of the request?

Which of the following access methods is used by Ethernet?

Which of the following layers provides end-to-end data transfer service?

The IP header contains a protocol field. If this field contains the value of 17, what type of data is contained within the ip datagram?

How do you distinguish between a bridge and a router?

ICMP and IGMP belong to which layer of the OSI model?

Telnet and rlogin use which protocol?

What is a limitation of TCP Wrappers?

The IP header contains a protocol field. If this field contains the value of 6, what type of data is contained within the ip datagram?

The IP header contains a protocol field. If this field contains the value of 1, what type of data is contained within the IP datagram?

The IP header contains a protocol field. If this field contains the value of 2, what type of data is contained within the IP datagram?

What is the proper term to refer to a single unit of Ethernet data at the link layer of the DoD TCP model ?

What is the proper term to refer to a single unit of IP data?

You are running a packet sniffer on a network and see a packet containing a long string of "0x90 0x90 0x90 0x90...." in the middle of it traveling to an x86-based machine as a targ...

A packet containing a long string of NOP's followed by a command is usually indicative of what?