SSCP Exam Questions

When submitting a passphrase for authentication, the passphrase is converted into ...

An alternative to using passwords for authentication in logical or technical access control is:

Almost all types of detection permit a system's sensitivity to be increased or decreased during an inspection process. If the system's sensitivity is increased, such as in a biomet...

In the context of Biometric authentication, what is a quick way to compare the accuracy of devices. In general, the device that have the lowest value would be the most accurate. Wh...

Because all the secret keys are held and authentication is performed on the Kerberos TGS and the authentication servers, these servers are vulnerable to:

The throughput rate is the rate at which individuals, once enrolled, can be processed and identified or authenticated by a biometric system. Acceptable throughput rates are in the...

In addition to the accuracy of the biometric systems, there are other factors that must also be considered:

Which of the following biometric devices has the lowest user acceptance level?

Which of the following would be an example of the best password?

A network-based vulnerability assessment is a type of test also referred to as:

Which of the following is NOT a form of detective administrative control?

Which TCSEC level is labeled Controlled Access Protection?

Which security model is based on the military classification of data and people with clearances?

What mechanism automatically causes an alarm originating in a data center to be transmitted over the local municipal fire or police alarm circuits for relaying to both the local po...

Which of the following does not apply to system-generated passwords?

Which of the following is not a preventive login control?

Which of the following forms of authentication would most likely apply a digital signature algorithm to every bit of data that is sent from the claimant to the verifier?

Who first described the DoD multilevel military security policy in abstract, formal terms?

What is the most critical characteristic of a biometric identifying system?

What is considered the most important type of error to avoid for a biometric access control system?

How can an individual/person best be identified or authenticated to prevent local masquarading attacks?

Which authentication technique best protects against hijacking?

Which of the following is not a security goal for remote access?

Which of the following questions is less likely to help in assessing identification and authentication controls?

In response to Access-request from a client such as a Network Access Server (NAS), which of the following is not one of the response from a RADIUS Server?

Which of the following statements pertaining to RADIUS is incorrect:

Which of the following is used by RADIUS for communication between clients and servers?

Which of the following protocol was used by the INITIAL version of the Terminal Access Controller Access Control System TACACS for communication between clients and servers?

Which of the following can best eliminate dial-up access through a Remote Access Server as a hacking vector?

In the Bell-LaPadula model, the Star-property is also called:

An attack initiated by an entity that is authorized to access system resources but uses them in a way not approved by those who granted the authorization is known as a(n):

Which of the following can be defined as a framework that supports multiple, optional authentication mechanisms for PPP, including cleartext passwords, challenge-response, and arbi...

What is a common problem when using vibration detection devices for perimeter control?

Which of the following security controls might force an operator into collusion with personnel assigned organizationally within a different function in order to gain access to unau...

What is the name of the first mathematical model of a multi-level security policy used to define the concept of a secure state, the modes of access, and rules for granting access?

Which of the following models does NOT include data integrity or conflict of interest?

What is the PRIMARY use of a password?

The three classic ways of authenticating yourself to the computer security software are: something you know, something you have, and something:

An access system that grants users only those rights necessary for them to perform their work is operating on which security principle?

Pin, Password, Passphrases, Tokens, smart cards, and biometric devices are all items that can be used for Authentication. When one of these item listed above in conjunction with a...

What is one disadvantage of content-dependent protection of information?

Which of the following is most appropriate to notify an internal user that session monitoring is being conducted?

What mechanism does a system use to compare the security labels of a subject and an object?

As per the Orange Book, what are two types of system assurance?

Which of the following are required for Life-Cycle Assurance?

Memory management in TCSEC levels B3 and A1 operating systems may utilize "data hiding". What does this mean?

What does "System Integrity" mean?

The Orange Book states that "Hardware and software features shall be provided that can be used to periodically validate the correct operation of the on-site hardware and firmware e...

Which of the following can be used as a covert channel?

Configuration Management controls what?