SSCP Exam Questions

The property of a system or a system resource being accessible and usable upon demand by an authorized system entity, according to performance specifications for the system is refe...

Which of the following is most concerned with personnel security?

Which of the following would best classify as a management control?

Which of the following is not a form of passive attack?

Which of the following statements pertaining to a security policy is incorrect?

Which of the following statements pertaining to software testing is incorrect?

Which of the following can be defined as the process of rerunning a portion of the test scenario or test plan to ensure that changes or corrections have not introduced new errors?

Which of the following statements pertaining to software testing approaches is correct?

Which of the following test makes sure the modified or new system includes appropriate access controls and does not introduce any security holes that might compromise other systems...

Which of the following phases of a software development life cycle normally addresses Due Care and Due Diligence?

Which of the following phases of a software development life cycle normally incorporates the security specifications, determines access controls, and evaluates encryption options?

Which of the following is less likely to be included in the change control sub-phase of the maintenance phase of a software product?

What is the act of obtaining information of a higher sensitivity by combining information from lower levels of sensitivity?

Which expert system operating mode allows determining if a given hypothesis is valid?

Why does compiled code pose more of a security risk than interpreted code?

Which software development model is actually a meta-model that incorporates a number of the software development models?

Which of the following is used in database information security to hide information?

Which of the following computer design approaches is based on the fact that in earlier technologies, the instruction fetch was the longest part of the cycle?

What is used to protect programs from all unauthorized modification or executional interference?

What is called a system that is capable of detecting that a fault has occurred and has the ability to correct the fault or operate around it?

What is defined as the hardware, firmware and software elements of a trusted computing base that implement the reference monitor concept?

Which of the following rules is least likely to support the concept of least privilege?

Which of the following is an unintended communication path that is NOT protected by the system's normal security mechanisms?

Which of the following is used to interrupt the opportunity to use or perform collusion to subvert operation for fraudulent purposes?

Which of the following is best defined as an administrative declaration by a designated authority that an information system is approved to operate in a particular security configu...

Which of the following is best defined as a circumstance in which a collection of information items is required to be classified at a higher security level than any of the individu...

Which of the following best defines add-on security?

Which of the following is best defined as a mode of system termination that automatically leaves system processes and components in a secure state when a failure occurs or is detec...

The preliminary steps to security planning include all of the following EXCEPT which of the following?

Step-by-step instructions used to satisfy control requirements is called a:

One purpose of a security awareness program is to modify:

Whose role is it to assign classification level to information?

What is the most secure way to dispose of information on a CD-ROM?

The Reference Validation Mechanism that ensures the authorized access relationships between subjects and objects is implementing which of the following concept:

Which of the following describes a logical form of separation used by secure computing systems?

What security problem is most likely to exist if an operating system permits objects to be used sequentially by multiple users without forcing a refresh of the objects?

At what stage of the applications development process should the security department become involved?

In what way could Java applets pose a security threat?

Which of the following is needed for System Accountability?

A timely review of system access audit records would be an example of which of the basic security functions?

Which of the following would assist the most in Host Based intrusion detection?

Who should measure the effectiveness of Information System security related controls in an organization?

In an online transaction processing system (OLTP), which of the following actions should be taken when erroneous or invalid transactions are detected?

Attributable data should be:

Which of the following best describes signature-based detection?

Which of the following is used to monitor network traffic or to monitor host audit logs in real time to determine violations of system security policy that have taken place?

Which of the following monitors network traffic in real time?

Which one of the following statements about the advantages and disadvantages of network- based Intrusion detection systems is true

Which protocol is NOT implemented in the Network layer of the OSI Protocol Stack?

The session layer provides a logical persistent connection between peer hosts. Which of the following is one of the modes used in the session layer to establish this connection?