SSCP Exam Questions

Which of the following tools is NOT likely to be used by a hacker?

Which of the following would be LESS likely to prevent an employee from reporting an incident?

Which of the following would NOT violate the Due Diligence concept?

What is the primary goal of setting up a honeypot?

Who is responsible for providing reports to the senior management on the effectiveness of the security controls?

Which of the following are the two MOST common implementations of Intrusion Detection Systems?

Network-based Intrusion Detection systems:

Which of the following are additional terms used to describe knowledge-based IDS and behavior based IDS?

Which of the following Intrusion Detection Systems (IDS) uses a database of attacks, known system vulnerabilities, monitoring current attempts to exploit those vulnerabilities, and...

Knowledge-based Intrusion Detection Systems (IDS) are more common than:

Which of the following types of Intrusion Detection Systems uses behavioral characteristics of a system's operation or network traffic to draw conclusions on whether the traffic re...

What ensures that the control mechanisms correctly implement the security policy for the entire life cycle of an information system?

What IDS approach relies on a database of known attacks?

Which of the following is most likely to be useful in detecting intrusions?

Which conceptual approach to intrusion detection system is the most common?

Several analysis methods can be employed by an IDS, each with its own strengths and weaknesses, and their applicability to any given situation should be carefully considered. There...

In order to enable users to perform tasks and duties without having to go through extra steps it is important that the security controls and mechanisms that are in place have a deg...

Which of the following is required in order to provide accountability?

Which of the following is NOT a valid reason to use external penetration service firms rather than corporate resources?

Which of the following statements pertaining to ethical hacking is incorrect?

The viewing of recorded events after the fact using a closed-circuit TV camera is considered a

Controls provide accountability for individuals who are accessing sensitive information. This accountability is accomplished:

Which of the following tools is less likely to be used by a hacker?

Why would anomaly detection IDSs often generate a large number of false positives?

What is the essential difference between a self-audit and an independent audit?

A periodic review of user account management should not determine:

Due care is not related to:

Which of the following is not a preventive operational control?

Which of the following questions are least likely to help in assessing controls covering audit trails?

What setup should an administrator use for regularly testing the strength of user passwords?

If an organization were to monitor their employees' e-mail, it should not:

Which of the following is the BEST way to detect software license violations?

In what way can violation clipping levels assist in violation tracking and analysis?

How often should a Business Continuity Plan be reviewed?

Which of the following best describes what would be expected at a "hot site"?

Who should direct short-term recovery actions immediately following a disaster?

Which one of the following represents an ALE calculation?

Prior to a live disaster test also called a Full Interruption test, which of the following is most important?

Which of the following should be emphasized during the Business Impact Analysis (BIA) considering that the BIA focus is on business processes?

Which of the following recovery plan test results would be most useful to management?

Which of the following computer recovery sites is only partially equipped with processing equipment?

Which of the following computer recovery sites is the least expensive and the most difficult to test?

Which of the following is the most important consideration in locating an alternate computing facility during the development of a disaster recovery plan?

Contracts and agreements are often times unenforceable or hard to enforce in which of the following alternate facility recovery agreement?

Organizations should not view disaster recovery as which of the following?

Which of the following groups represents the leading source of computer crime losses?

Which of the following is the best reason for the use of an automated risk analysis tool?

A deviation from an organization-wide security policy requires which of the following?

Which of the following is biggest factor that makes Computer Crimes possible?

Under United States law, an investigator's notebook may be used in court in which of the following scenarios?