SSCP Prac tice Tests with 125 Questions and Complete
Answers.
How does IPSec verify that data arrived at the destination without intentional or
accidental corruption? - ANS By using a randomized hashing operation
How is quantitative risk analysis performed? - ANS Using calculations
Your company adopts a new end-user security awareness program. This training
includes malware introduction, social media issues, password guidelines, data
exposure, and lost devices. How often should end users receive this training? - ANS
upon new hire and once a year thereafter
Your organization experienced an impersonation attack recently that compromised the
network administrator's user account. In response, new security measures are being
implemented throughout the organization. You have been assigned the task of
improving authentication. You want a new authentication system that ensures the
following:
Eavesdropped passwords cannot be used by an attacker.
Passwords are only able to be used once.
Password predication must be prevented.
Passwords are only valid for a short period of time.
How can you accomplish these goals? - ANS Implement a synchronized, one-time
password token-based authentication system.
How can a user be assured that a file downloaded from a vendor's Web site is free from
malicious code? - ANS Check the file's signature and hash calculation.
Why do many security monitoring systems produce a visualization of the collected
results? - ANS It represents complex or bulky data in an easy to understand format.
What is the name of a cryptographic attack based on a database of pre-computed hash
values and the original plaintext values? - ANS Rainbow table attack
In addition to having at least one year of relevant experience in a domain of SSCP, what
is another requirement to be qualified to take the SSCP exam? - ANS Agreeing to abide
by the (ISC)2 Code Of Ethics
What is the definition of the principle of least privilege? - ANS Users are assigned
minimal privileges sufficient to accomplish job responsibilities.
A common attack against converged network communications is eavesdropping. How
can this attack be prevented? - ANS Use a VPN.
