SSCP Exam Questions

Which of the following is not a two-factor authentication mechanism?

Which of the following access control models introduces user security clearance and data classification?

Password management falls into which control category?

Which of the following access control models requires security clearance for subjects?

Which of the following access control models requires defining classification for objects?

In the context of access control, locks, gates, guards are examples of which of the following?

Which of the following statements pertaining to using Kerberos without any extension is false?

Which of the following statements pertaining to Kerberos is false?

Which access control model would a lattice-based access control model be an example of?

Which of the following is an example of discretionary access control?

Which of the following would be used to implement Mandatory Access Control (MAC)?

Which type of attack involves impersonating a user or a system?

Which of the following is NOT an advantage that TACACS+ has over TACACS?

Which of the following remote access authentication systems is the most robust?

Which of the following is an example of a passive attack?

What does the Clark-Wilson security model focus on?

What does the simple security (ss) property mean in the Bell-LaPadula model?

What does the (star) property mean in the Bell-LaPadula model?

What does the (star) integrity axiom mean in the Biba model?

What does the simple integrity axiom mean in the Biba model?

What is the Biba security model concerned with?

Which security model uses division of operations into different parts and requires different users to perform each part?

What is the main objective of proper separation of duties?

Which of the following is related to physical security and is not considered a technical control?

Which of the following floors would be most appropriate to locate information processing facilities in a 6-stories building?

Which of the following Operation Security controls is intended to prevent unauthorized intruders from internally or externally accessing the system, and to lower the amount and imp...

This baseline sets certain thresholds for specific errors or mistakes allowed and the amount of these occurrences that can take place before it is considered suspicious?

Which type of control is concerned with avoiding occurrences of risks?

Which type of control is concerned with restoring controls?

Which of the following biometric parameters are better suited for authentication use over a long period of time?

In the CIA triad, what does the letter A stand for?

Which TCSEC class specifies discretionary protection?

Which of the following access control techniques best gives the security officers the ability to specify and enforce enterprise-specific security policies in a way that maps natura...

Which access control model was proposed for enforcing access control in government and military applications?

Which access control model achieves data integrity through well-formed transactions and separation of duties?

For maximum security design, what type of fence is most effective and cost-effective method (Foot are being used as measurement unit below)?

Which of the following protection devices is used for spot protection within a few inches of the object, rather than for overall room security monitoring?

Physical security is accomplished through proper facility construction, fire and water protection, anti-theft mechanisms, intrusion detection systems, and security procedures that...

The National Institute of Standards and Technology (NIST) standard pertaining to perimeter protection states that critical areas should be illuminated up to?

This is a common security issue that is extremely hard to control in large environments. It occurs when a user has more computer rights, permissions, and access than what is requir...

Which of the following are additional access control objectives?

Logical or technical controls involve the restriction of access to systems and the protection of information. Which of the following statements pertaining to these types of control...

Controls provide accountability for individuals who are accessing sensitive information. This accountability is accomplished:

In Discretionary Access Control the subject has authority, within certain limitations,

In non-discretionary access control using Role Based Access Control (RBAC), a central authority determines what subjects can have access to certain objects based on the organizatio...

In an organization where there are frequent personnel changes, non-discretionary access control using Role Based Access Control (RBAC) is useful because:

Another type of access control is lattice-based access control. In this type of control a lattice model is applied. How is this type of access control concept applied?

Detective/Technical measures:

Identification and authentication are the keystones of most access control systems. Identification establishes:

Passwords can be required to change monthly, quarterly, or at other intervals: