SSCP Exam Questions

Technical controls such as encryption and access control can be built into the operating system, be software applications, or can be supplemental hardware/software units. Such cont...

What is called the use of technologies such as fingerprint, retina, and iris scans to authenticate the individuals requesting access to resources?

What are called user interfaces that limit the functions that can be selected by a user?

What would be the name of a Logical or Virtual Table dynamically generated to restrict the information a user can access in a database?

The control measures that are intended to reveal the violations of security policy using software and hardware are associated with:

The controls that usually require a human to evaluate the input from sensors or cameras to determine if a real threat exists are associated with:

A central authority determines what subjects can have access to certain objects based on the organizational security policy is called:

What is called the act of a user professing an identity to a system, usually in the form of a log-on ID?

What is called the verification that the user's claimed identity is valid and is usually implemented through a user password at log-on time?

Which one of the following factors is NOT one on which Authentication is based?

Which type of password provides maximum security because a new password is required for each new log-on?

What is called a password that is the same for each log-on session?

What is called a sequence of characters that is usually longer than the allotted number for a password?

Which of the following would be true about Static password tokens?

In Synchronous dynamic password tokens:

Which of the following choices describe a Challenge-response tokens generation?

What is called an automated means of identifying or authenticating the identity of a living person based on physiological or behavioral characteristics?

In biometrics, "one-to-many" search against database of stored biometric images is done in:

In biometrics, the "one-to-one" search used to verify claim to an identity made by a person is considered:

What is called the percentage of valid subjects that are falsely rejected by a Biometric Authentication system?

What is called the percentage at which the False Rejection Rate equals the False Acceptance Rate?

Considerations of privacy, invasiveness, and psychological and physical comfort when using the system are important elements for which of the following?

Which of the following best ensures accountability of users for the actions taken within a system or domain?

Which of the following statements pertaining to biometrics is FALSE?

Which of the following biometric devices offers the LOWEST CER?

Which of the following is the LEAST user accepted biometric device?

Which of the following is the WEAKEST authentication mechanism?

Which of the following statements pertaining to access control is false?

Which of the following is NOT part of the Kerberos authentication protocol?

Which access control model enables the OWNER of the resource to specify what subjects can access specific resources based on their identity?

Which of the following access control models is based on sensitivity labels?

Which access control model is also called Non Discretionary Access Control (NDAC)?

Which access model is most appropriate for companies with a high employee turnover?

What can be defined as a list of subjects along with their access rights that are authorized to access a specific object?

What is the difference between Access Control Lists (ACLs) and Capability Tables?

What can be defined as a table of subjects and objects indicating what actions individual subjects can take upon individual objects?

Which access control model is best suited in an environment where a high security level is required and where it is desired that only the administrator grants access control?

Which access control model provides upper and lower bounds of access capabilities for a subject?

How are memory cards and smart cards different?

Why do buffer overflows happen? What is the main cause?

What is the main focus of the Bell-LaPadula security model?

Which of the following statements pertaining to the Bell-LaPadula is TRUE if you are NOT making use of the strong star property?

Which security model introduces access to objects only through programs?

Which security model ensures that actions that take place at a higher security level do not affect actions that take place at a lower level?

Which of the following security models does NOT concern itself with the flow of data?

What Orange Book security rating is reserved for systems that have been evaluated but fail to meet the criteria and requirements of the higher divisions?

Which division of the Orange Book deals with discretionary protection (need-to-know)?

Which of the following is most affected by denial-of-service (DOS) attacks?

What refers to legitimate users accessing networked services that would normally be restricted to them?

In regards to information classification what is the main responsibility of information (data) owner?