SSCP Exam Questions

What is the main goal of a risk management program?

The __________ is the most dangerous part of a virus program.

A one way hash converts a string of random length into a _______________ encrypted string.

Although it is considered a low tech attack ____________ is still a very effective way of gaining unauthorized access to network systems.

Diffie Hellman, RSA, and ___________ are all examples of Public Key cryptography?

___________, generally considered "need to know" access is given based on permissions granted to the user.

What are the main goals of an information security program? (Choose all that apply)

The ability to adjust access control to the exact amount of permission necessary is called ______________.

Which one of these formulas is used in Quantitative risk analysis?

Integrity = ______________

A true network security audit does include an audit for modems?

What is the main difference between a logic bomb and a stealth virus? (Choose all that apply)

What is the minimum recommended length of a security policy?

There are ______ available service ports

Each of the following is a valid step in handling incidents except ____________

Which of the following is NOT and encryption algorithm?

Which range defines "well known ports?

What does RADIUS stand for?

In the past, many companies had been hesitant to report computer crimes.

If you the text listed below at the beginning or end of an email message, what would it be anindication of? mQGiBDfJY1ERBADd1lBX8WlbSHj2uDt6YbMVl4Da3O1yG0exQnEwU3sKQARzspNB zB2BF+n...

Although they are accused of being one in the same, hackers and crackers are two distinctly different groups with different goals pertaining to computers.

Select three ways to deal with risk.

Digital Certificates use which protocol?

What happens if this registry value is set to 1? HKLM\System\CurrentControlSet\Control\Lsa\CrashonAuditFail

In a Public Key Infrastructure (PKI), what is the role of a directory server?

Which of the following is currently used in conjunction with most Internet-based certificates to provide continuous authentication?

Encryption ciphers that use the same key to encrypt and decrypt are called?

A digital signature is made with?

What protocol is typically used to login to a remote machine and execute commands?

Which of the following organizations can be a valid Certificate Authority (CA)?

It is difficult to prosecute a computer criminal if warning banners are not deployed?

What is the following paragraph an example of? <<ATTN: This system is for the use of authorized persons only. If you use this system without authority, or if you abuse your authori...

__________ is the most famous Unix password cracking tool.

PGP & PEM are programs that allow users to send encrypted messages to each other. What form of encryption do these programs use?

Which of the following are NT Audit events? (Choose all that apply)

The most secure method for storing backup tapes is?

The IDEA algorithm (used in PGP) is _______ bits long.

Which organization(s) are responsible for the timely distribution of information security intelligence data?

A password audit consists of checking for ____________?

What term describes the amount of risk that remains after the countermeasures have been deployed and the vulnerabilities classified?

Risk assessment deals with constant monitoring?

Countermeasures address security concerns in which of the following categories?

Which of these virus incidents did not occur in 1999? (Choose all that apply)

Companies can now be sued for privacy violations just as easily as they can be sued for security compromises.

Passfilt.dll enforces which of the following? (Choose all that apply)

_________ is a form of Denial of Service attack which interrupts the TCP three way handshake and leaves half open connections.

The following actions have been noted as providing motivation to virus writers? (Choose all that apply)

Which of the following are used in Biometrics?

Smart cards are a secure alternative to which weak security mechanism?

What type of software can be used to prevent, detect (and possibly correct) malicious activities on a system?