[Apr 10, 2025] Valid SSCP Test Answers & ISC SSCP Exam PDF
Realistic SSCP Exam Dumps with Accurate & Updated Questions
ISC2 SSCP Exam Certification Details:
| Exam Price | $249 (USD) |
| Duration | 180 mins |
| Number of Questions | 125 |
| Schedule Exam | Pearson VUE |
| Passing Score | 700/1000 |
| Sample Questions | ISC2 SSCP Sample Questions |
NEW QUESTION # 214
Which of the following is given the responsibility of the maintenance and protection of the data?
- A. User
- B. Data owner
- C. Data custodian
- D. Security administrator
Answer: C
Explanation:
It is usually responsible for maintaining and protecting the data.
The following answers are incorrect:
Data owner is usually a member of management , in charge of a specific business unit and is ultimately responsible for the protection and use of the information.
User is any individual who routinely uses the data for work-related tasks.
Security administrator's tasks include creating new system user accounts , implementing new security software.
NEW QUESTION # 215
Which of the following algorithms does NOT provide hashing?
- A. MD2
- B. SHA-1
- C. MD5
- D. RC4
Answer: D
Explanation:
As it is an algorithm used for encryption and does not provide hashing
functions , it is also commonly implemented ' Stream Ciphers '.
The other answers are incorrect because :
SHA-1 was designed by NIST and NSA to be used with the Digital Signature Standard
(DSS). SHA was designed to be used in digital signatures and was developed when a
more secure hashing algorithm was required for U.S. government applications.
MD2 is a one-way hash function designed by Ron Rivest that creates a 128-bit message
digest value. It is not necessarily any weaker than the other algorithms in the "MD" family,
but it is much slower.
MD5 was also created by Ron Rivest and is the newer version of MD4. It still produces a
128-bit hash, but the algorithm is more complex, which makes it harder to break.
Reference : Shon Harris , AIO v3 , Chapter - 8 : Cryptography , Page : 644 - 645
NEW QUESTION # 216
If an operating system permits shared resources such as memory to be used sequentially by multiple users/application or subjects without a refresh of the objects/memory area, what security problem is MOST likely to exist?
- A. Data leakage through covert channels.
- B. Unauthorized obtaining of a privileged execution state.
- C. Disclosure of residual data.
- D. Denial of service through a deadly embrace.
Answer: C
Explanation:
Allowing objects to be used sequentially by multiple users without a refresh of the objects can lead to disclosure of residual data. It is important that steps be taken to eliminate the chance for the disclosure of residual data.
Object reuse refers to the allocation or reallocation of system resources to a user or, more appropriately, to an application or process. Applications and services on a computer system may create or use objects in memory and in storage to perform programmatic functions. In some cases, it is necessary to share these resources between various system applications. However, some objects may be employed by an application to perform privileged tasks on behalf of an authorized user or upstream application. If object usage is not controlled or the data in those objects is not erased after use, they may become available to unauthorized users or processes.
Disclosure of residual data and Unauthorized obtaining of a privileged execution state are both a problem with shared memory and resources. Not clearing the heap/stack can result in residual data and may also allow the user to step on somebody's session if the security token/identify was maintained in that space. This is generally more malicious and intentional than accidental though. The MOST common issue would be Disclosure of residual data.
The following answers are incorrect:
Unauthorized obtaining of a privileged execution state. Is incorrect because this is not a problem with Object Reuse.
Data leakage through covert channels. Is incorrect because it is not the best answer. A covert channel is a communication path. Data leakage would not be a problem created by Object Reuse. In computer security, a covert channel is a type of computer security attack that creates a capability to transfer information objects between processes that are not supposed to be allowed to communicate by the computer security policy. The term, originated in 1973 by Lampson is defined as "(channels) not intended for information transfer at all, such as the service program's effect on system load." to distinguish it from Legitimate channels that are subjected to access controls by COMPUSEC.
Denial of service through a deadly embrace. Is incorrect because it is only a detractor.
References:
Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third Edition ((ISC)2 Press) (Kindle Locations 4174-4179). Auerbach Publications. Kindle Edition. and https://www.fas.org/irp/nsa/rainbow/tg018.htm and http://en.wikipedia.org/wiki/Covert_channel
NEW QUESTION # 217
Which of the following types of Intrusion Detection Systems uses behavioral characteristics of a system's operation or network traffic to draw conclusions on whether the traffic represents a risk to the network or host?
- A. Signature Analysis.
- B. Host-based ID systems.
- C. Network-based ID systems.
- D. Anomaly Detection.
Answer: D
Explanation:
There are two basic IDS analysis methods: pattern matching (also called signature analysis) and anomaly detection.
Anomaly detection uses behavioral characteristics of a system's operation or network traffic to draw conclusions on whether the traffic represents a risk to the network or host. Anomalies may include but are not limited to:
Multiple failed log-on attempts
Users logging in at strange hours
Unexplained changes to system clocks
Unusual error messages
The following are incorrect answers:
Network-based ID Systems (NIDS) are usually incorporated into the network in a passive architecture, taking advantage of promiscuous mode access to the network. This means that it has visibility into every packet traversing the network segment. This allows the system to inspect packets and monitor sessions without impacting the network or the systems and applications utilizing the network.
Host-based ID Systems (HIDS) is the implementation of IDS capabilities at the host level. Its most significant difference from NIDS is that related processes are limited to the boundaries of a single- host system. However, this presents advantages in effectively detecting objectionable activities because the IDS process is running directly on the host system, not just observing it from the network. This offers unfettered access to system logs, processes, system information, and device information, and virtually eliminates limits associated with encryption. The level of integration represented by HIDS increases the level of visibility and control at the disposal of the HIDS application.
Signature Analysis Some of the first IDS products used signature analysis as their detection method and simply looked for known characteristics of an attack (such as specific packet sequences or text in the data stream) to produce an alert if that pattern was detected. For example, an attacker manipulating an FTP server may use a tool that sends a specially constructed packet. If that particular packet pattern is known, it can be represented in the form of a signature that IDS can then compare to incoming packets. Pattern-based IDS will have a database of hundreds, if not thousands, of signatures that are compared to traffic streams. As new attack signatures are produced, the system is updated, much like antivirus solutions. There are drawbacks to pattern-based IDS. Most importantly, signatures can only exist for known attacks. If a new or different attack vector is used, it will not match a known signature and, thus, slip past the IDS. Additionally, if an attacker knows that the IDS is present, he or she can alter his or her methods to avoid detection. Changing packets and data streams, even slightly, from known signatures can cause an IDS to miss the attack. As with some antivirus systems, the IDS is only as good as the latest signature database on the system.
NEW QUESTION # 218
As per the Orange Book, what are two types of system assurance?
- A. Operational Assurance and Architectural Assurance.
- B. Architectural Assurance and Implementation Assurance.
- C. Operational Assurance and Life-Cycle Assurance.
- D. Design Assurance and Implementation Assurance.
Answer: C
Explanation:
Explanation/Reference:
Are the two types of assurance mentioned in the Orange book.
The following answers are incorrect:
Operational Assurance and Architectural Assurance. Is incorrect because Architectural Assurance is not a type of assurance mentioned in the Orange book.
Design Assurance and Implementation Assurance. Is incorrect because neither are types of assurance mentioned in the Orange book.
Architectural Assurance and Implementation Assurance. Is incorrect because neither are types of assurance mentioned in the Orange book.
NEW QUESTION # 219
What is the most critical characteristic of a biometric identifying system?
- A. Accuracy
- B. Scalability
- C. Perceived intrusiveness
- D. Storage requirements
Answer: A
Explanation:
Section: Access Control
Explanation
Explanation/Reference:
Accuracy is the most critical characteristic of a biometric identifying verification system.
Accuracy is measured in terms of false rejection rate (FRR, or type I errors) and false acceptance rate (FAR or type II errors).
The Crossover Error Rate (CER) is the point at which the FRR equals the FAR and has become the most important measure of biometric system accuracy.
Source: TIPTON, Harold F. & KRAUSE, Micki, Information Security Management Handbook, 4th edition (volume 1), 2000, CRC Press, Chapter 1, Biometric Identification (page 9).
NEW QUESTION # 220
Business Continuity Planning (BCP) is not defined as a preparation that facilitates:
- A. the continuation of critical business functions
- B. the rapid recovery of mission-critical business operations
- C. the monitoring of threat activity for adjustment of technical controls
- D. the reduction of the impact of a disaster
Answer: C
Explanation:
Section: Risk, Response and Recovery
Explanation/Reference:
Although important, The monitoring of threat activity for adjustment of technical controls is not facilitated by a Business Continuity Planning The following answers are incorrect:
All of the other choices are facilitated by a BCP:
the continuation of critical business functions
the rapid recovery of mission-critical business operations
the reduction of the impact of a disaster
NEW QUESTION # 221
Which layer of the DoD TCP/IP Model ensures error-free delivery and packet sequencing?
- A. Internet layer
- B. Network access layer
- C. Host-to-host
- D. Application layer
Answer: C
Explanation:
This layer of the DoD Model is also sometimes called Transport in some books but the proper name is Host-to-Host as per the RFC document.
The host-to-host layer provides for reliable end-to-end communications, ensures the data's error-free delivery, handles the data's packet sequencing, and maintains the data's integrity.
It is comparable to the transport layer of the OSI model.
Reference(s) used for this question:
http://en.wikipedia.org/wiki/Internet_protocol_suite and http://technet.microsoft.com/en-us/library/cc786900%28v=ws.10%29.aspx and KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page 85).
NEW QUESTION # 222
When submitting a passphrase for authentication, the passphrase is converted into ...
- A. a new passphrase by the encryption technology
- B. a real password by the system which can be used forever
- C. a new passphrase by the system
- D. a virtual password by the system
Answer: D
Explanation:
Explanation/Reference:
Passwords can be compromised and must be protected. In the ideal case, a password should only be used once. The changing of passwords can also fall between these two extremes.
Passwords can be required to change monthly, quarterly, or at other intervals, depending on the criticality of the information needing protection and the password's frequency of use.
Obviously, the more times a password is used, the more chance there is of it being compromised.
It is recommended to use a passphrase instead of a password. A passphrase is more resistant to attacks.
The passphrase is converted into a virtual password by the system. Often time the passphrase will exceed the maximum length supported by the system and it must be trucated into a Virtual Password.
Reference(s) used for this question:
http://www.itl.nist.gov/fipspubs/fip112.htm
and
KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 36 & 37.
NEW QUESTION # 223
Which of the following centralized access control mechanisms is the least appropriate for mobile workers accessing the corporate network over analog lines?
- A. TACACS
- B. RADIUS
- C. Call-back
- D. CHAP
Answer: C
Explanation:
Section: Access Control
Explanation/Reference:
Call-back allows for a distant user connecting into a system to be called back at a number already listed in a database of trusted users. The disadvantage of this system is that the user must be at a fixed location whose phone number is known to the authentication server. Being mobile workers, users are accessing the system from multiple locations, making call-back inappropriate for them.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 2: Access control systems (page 44).
NEW QUESTION # 224
Which access control type has a central authority that determine to what objects the subjects have access to and it is based on role or on the organizational security policy?
- A. Rule-based Access control
- B. Mandatory Access Control
- C. Discretionary Access Control
- D. Non-Discretionary Access Control
Answer: D
Explanation:
Section: Access Control
Explanation/Reference:
Non Discretionary Access Control include Role Based Access Control (RBAC) and Rule Based Access Control (RBAC or RuBAC). RABC being a subset of NDAC, it was easy to eliminate RBAC as it was covered under NDAC already.
Some people think that RBAC is synonymous with NDAC but RuBAC would also fall into this category.
Discretionary Access control is for environment with very low level of security. There is no control on the dissemination of the information. A user who has access to a file can copy the file or further share it with other users.
Rule Based Access Control is when you have ONE set of rules applied uniformly to all users. A good example would be a firewall at the edge of your network. A single rule based is applied against any packets received from the internet.
Mandatory Access Control is a very rigid type of access control. The subject must dominate the object and the subject must have a Need To Know to access the information. Objects have labels that indicate the sensitivity (classification) and there is also categories to enforce the Need To Know (NTK).
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 33.
NEW QUESTION # 225
Which of the following elements of telecommunications is not used in assuring confidentiality?
- A. Network security protocols
- B. Data encryption services
- C. Passwords
- D. Network authentication services
Answer: C
Explanation:
Passwords are one of the multiple ways to authenticate (prove who you claim to be) an identity which allows confidentiality controls to be enforced to assure the identity can only access the information for which it is authorized. It is the authentication that assists assurance of confidentiality not the passwords.
"Network security protocols" is incorrect. Network security protocols are quite useful in assuring confidentiality in network communications.
"Network authentication services" is incorrect. Confidentiality is concerned with allowing only authorized users to access information. An important part of determining authorization is authenticating an identity and this service is supplied by network authentication services.
"Data encryption services" is incorrect. Data encryption services are quite useful in protecting the confidentiality of information.
NEW QUESTION # 226
Business Continuity Planning (BCP) is not defined as a preparation that facilitates:
- A. the continuation of critical business functions
- B. the rapid recovery of mission-critical business operations
- C. the monitoring of threat activity for adjustment of technical controls
- D. the reduction of the impact of a disaster
Answer: C
Explanation:
Although important, The monitoring of threat activity for adjustment of technical controls is not facilitated by a Business Continuity Planning The following answers are incorrect:
All of the other choices are facilitated by a BCP:
the continuation of critical business functions
the rapid recovery of mission-critical business operations the reduction of the impact of a disaster
NEW QUESTION # 227
For maximum security design, what type of fence is most effective and cost-effective method (Foot are being used as measurement unit below)?
- A. 8' high and above with strands of barbed wire
- B. 6' to 7' high
- C. Double fencing
- D. 3' to 4' high
Answer: C
Explanation:
The most commonly used fence is the chain linked fence and it is the most
affordable. The standard is a six-foot high fence with two-inch mesh square openings. The
material should consist of nine-gauge vinyl or galvanized metal. Nine-gauge is a typical
fence material installed in residential areas.
Additionally, it is recommended to place barbed wire strands angled out from the top of the
fence at a 45 angle and away from the protected area with three strands running across
the top. This will provide for a seven-foot fence. There are several variations of the use of
"top guards" using V-shaped barbed wire or the use of concertina wire as an enhancement,
which has been a replacement for more traditional three strand barbed wire "top guards."
The fence should be fastened to ridged metal posts set in concrete every six feet with
additional bracing at the corners and gate openings. The bottom of the fence should be
stabilized against intruders crawling under by attaching posts along the bottom to keep the
fence from being pushed or pulled up from the bottom. If the soil is sandy, the bottom edge
of the fence should be installed below ground level.
For maximum security design, the use of double fencing with rolls of concertina wire
positioned between the two fences is the most effective deterrent and cost-efficient
method. In this design, an intruder is required to use an extensive array of ladders and
equipment to breach the fences.
Most fencing is largely a psychological deterrent and a boundary marker rather than a
barrier, because in most cases such fences can be rather easily penetrated unless added
security measures are taken to enhance the security of the fence. Sensors attached to the
fence to provide electronic monitoring of cutting or scaling the fence can be used.
Reference(s) used for this question:
Hernandez CISSP, Steven (2012-12-21). Official (ISC)2 Guide to the CISSP CBK, Third
Edition ((ISC)2 Press) (Kindle Locations 24416-24431). Auerbach Publications. Kindle
Edition.
NEW QUESTION # 228
The ultimate goal of a computer forensics specialist is to ___________________.
- A. Protect the company's reputation
- B. Investigate the computer crime
- C. Testify in court as an expert witness
- D. Preserve electronic evidence and protect it from any alteration
Answer: D
NEW QUESTION # 229
The IP header contains a protocol field. If this field contains the value of 1, what type of data is contained within the IP datagram?
- A. TCP.
- B. ICMP.
- C. IGMP.
- D. UDP.
Answer: B
Explanation:
Explanation/Reference:
If the protocol field has a value of 1 then it would indicate it was ICMP.
The following answers are incorrect:
TCP. Is incorrect because the value for a TCP protocol would be 6.
UDP. Is incorrect because the value for an UDP protocol would be 17.
IGMP. Is incorrect because the value for an IGMP protocol would be 2.
NEW QUESTION # 230
Which of the following backup methods makes a complete backup of every file on the server every time it is run?
- A. full backup method.
- B. incremental backup method.
- C. tape backup method.
- D. differential backup method.
Answer: A
Explanation:
The Full Backup Method makes a complete backup of every file on the server every time it is run.
NEW QUESTION # 231
......
Here is the Certification Path of ISC SSCP Exam
What are the prerequisites for this exam? What experience, if any, do I need in order to take the ISC SSCP exam?
ISC SSCP Dumps describes that to qualify, an applicant must meet all of the following criteria:
Candidates must be at least 18 years of age. Candidates must verify that they hold a bachelor's degree from a recognized university, or its equivalent, from a regionally accredited institution of higher learning in a field that is related to information systems security certification.
For example, if you have a computer science or computer engineering degree, you must have studied at an accredited university with a focus on information systems security. Candidates are required to have completed a minimum of seventy (70) hours of training in the topics like Coursework in information systems security, Incident handling, Ethical hacking, Digital forensics, Social engineering, the Security assessment in information systems, Vulnerability assessment in information systems, Cryptography for network events and controls at the network layer or higher, Cryptography for application events and controls at the application layer or higher, Cryptography for data at data layer or higher. Candidates must pass the ISC Certified Penetration Tester (CPT) certification exam.
ISC SSCP Exam Syllabus Topics:
| Topic | Details |
|---|---|
| Topic 1 |
|
| Topic 2 |
|
| Topic 3 |
|
| Topic 4 |
|
| Topic 5 |
|
| Topic 6 |
|
SSCP Exam Dumps - PDF Questions and Testing Engine: https://www.briandumpsprep.com/SSCP-prep-exam-braindumps.html
SSCP Dumps - The Sure Way To Pass Exam: https://drive.google.com/open?id=1BQZUAfzEfeb89REd_fa6Dd1f0o-YyNML
