SSCP Exam Questions

The difference between fraud and embezzlement is ________________-.

In order to use L0pht, the ___________ must be exported from Windows NT.

A critical element for investigators is to:

Media that is the target of an investigation should be copied on to:

Tripwire is a ___________________-

Some Unix systems use a very simple cipher called _________.

When packets are captured and converted to hexadecimal, _______ represents the ICMP protocol in the IP header.

L2TP is considered to be a less secure protocol than PPTP.

Which of the following is NOT an encryption method used by VPNs (Virtual Private Networks)?

Define the acronym RBAC

A ___________ is a program that poses as a useful or legitimate program, but turns out to be malicious code.

Select the major difference(s) between block and stream ciphers. (Choose all that apply)

_____________ states that users should only be given enough access to accomplish their jobs.

SATAN stands for _______________________________________________

PGP allows which of the following to be encrypted?

A chronologically sorted record of all the activities on a system is known as an____________

Much like the layers of an onion, ______________ is a comprehensive set of security solutions layered to provide the best protection.

Threat assessment has four major components, name them. (Choose four)

A systems ability to identify a particular individual, track their actions, and monitor their behavior is known as:

To meet SSCP certification requirements a candidate must _______ and __________. (Choose two)

_________ is the act of a user professing an identity to a system.

_______ and ________ are the primary controls of most access control systems.<br>(Choose two)

Authentication is based on which of the following:<br>(Choose three)

________ ___________ refers to the act of requiring more than on type of authentication to be used and is considered more secure than any single type of authentication.<br> (Choose...

What system allows a user to provide one ID and password per work session and then is automatically logged-on to all the required applications?

Name three SSO types? (Choose three)

Kerberos uses asymmetric encryption.(True / False)

Why are clipping levels used?

Which three things must be considered for the design, planning, and implementation of access control mechanisms? (Choose three)

The Crossover Error Rate (CER) is a good measure of performance for:

What are the three performance measurements used in biometrics?<br>(Choose three)

As telnet is widely know to be insecure, one time passwords (OPIE) offer a great alternative. After a user logs on remotely, OPIE will issue a challenge. What two elements will thi...

Overloading or congesting a system's resources so that it is unable to provide required services is referred to as:

Spoofing is a sophisticated technique of authenticating one computer to another by forging IP packets from a trusted source address(True / False)

Password crackers fall into two broad categories. What are they?<br>(Choose two)

Sandra has used Ethereal, a packet sniffer, to listen in on network transmissions. She has captured several passwords. What type of attack has been performed on her network?

Which of the following DoS attacks use ICMP? (Choose two)

The term "principle of least privilege" is best as:

What security control provides a method to insure that a transaction did or did not occur?

The most common source of attack against companies comes from:

________, _________, and __________ are required to successfully complete a crime. (Choose three)

Insiders have a clear advantage in committing computer crime. Which two of the following do they possess? (Choose two)

Which of the following is considered the MOST secure?

Which of the following are valid modes of operation? (Choose all that apply)

Masquerading is synonymous with __________.

The principle of least privilege is effective in helping prevent security breaches, however, prevention works best when applied with _______ and ______. Together, these three compl...

What are the three components of the AIC triad? (Choose three)

________, _________, and __________ are required to successfully complete a crime.<br>(Choose three)

Which of the following is considered the MOST secure?

The change control process: