SSCP: System Security Certified Practitioner (SSCP) — Free Practice Questions
10 free sample questions from a bank of 676, with the correct answers and explanations. No signup required — start practising right now.
1A potential problem related to the physical installation of the Iris Scanner in regards to the usage of the iris pattern within a biometric system is:
concern that the laser beam may cause eye damage
the iris pattern changes as a person grows older.
there is a relatively high rate of false accepts.
the optical unit must be positioned so that the sun does not shine into the aperture.
Answer: D
2In Mandatory Access Control, sensitivity labels attached to object contain what information?
The item's classification
The item's classification and category set
The item's category
The items's need to know
Answer: B
3What are the components of an object's sensitivity label?
A Classification Set and a single Compartment.
A single classification and a single compartment.
A Classification Set and user credentials.
A single classification and a Compartment Set.
Answer: D
4What does it mean to say that sensitivity labels are "incomparable"?
The number of classification in the two labels is different.
Neither label contains all the classifications of the other.
the number of categories in the two labels are different.
Neither label contains all the categories of the other.
Answer: D
5Which of the following is true about Kerberos?
It utilizes public key cryptography.
It encrypts data after a ticket is granted, but passwords are exchanged in plain text.
It depends upon symmetric ciphers.
It is a second party authentication system.
Answer: C
6Which of the following is needed for System Accountability?
Audit mechanisms.
Documented design as laid out in the Common Criteria.
Authorization.
Formal verification of system design.
Answer: A
7What is Kerberos?
A three-headed dog from the egyptian mythology.
A trusted third-party authentication protocol.
A security model.
A remote authentication dial in user server.
Answer: B
8The three classic ways of authenticating yourself to the computer security software are by something you know, by something you have, and by something:
you need.
non-trivial
you are.
you can get.
Answer: C
9A timely review of system access audit records would be an example of which of the basic security functions?
avoidance.
deterrence.
prevention.
detection.
Answer: D
10A confidential number used as an authentication factor to verify a user's identity is called a: