SSCP Sample Questions & Answers
The outline spans core security concepts, identity and access control, risk and threat monitoring, incident handling and recovery, cryptography and public key infrastructure, network defenses, and securing systems, applications and cloud data.
Launch the full SSCP simulator →Showing 10 of 20 free samples.
- Question 1
What attribute is included in a X.509-certificate?
Show answer & explanation
Correct answer: C
C-Explanation:
RFC 2459 : Internet X.509 Public Key Infrastructure Certificate and CRL Profile; GUTMANN, P., X.509 style guide; SMITH, Richard E., Internet Cryptography, 1997, Addison-Wesley Pub Co. - Question 2
In a hierarchical PKI, the highest CA is regularly called Root CA, it is also referred to by which one of the following terms?
Show answer & explanation
Correct answer: C
C-Reference: Arsenault, Turner, Internet X.509 Public Key Infrastructure: Roadmap, Chapter "Terminology".
- Question 3
A confidential number used as an authentication factor to verify a user's identity is called a:
Show answer & explanation
Correct answer: B
B-Explanation:
PIN Stands for Personal Identification Number, as the name states it is a combination of numbers. - Question 4
Which of the following answers is described as a random value used in cryptographic algorithms to ensure that patterns are not created during the encryption process?
Show answer & explanation
Correct answer: C
C-Explanation:
The basic power in cryptography is randomness. This uncertainty is why encrypted data is unusable to someone without the key to decrypt. - Question 5
What is the name of the first mathematical model of a multi-level security policy used to define the concept of a secure state, the modes of access, and rules for granting access?
Show answer & explanation
Correct answer: A
A-Explanation:
Source: TIPTON, Hal, (ISC)2, Introduction to the CISSP Exam presentation. - Question 6
Which of the following should NOT normally be allowed through a firewall?
Show answer & explanation
Correct answer: D
D-Explanation:
The Simple Network Management Protocol (SNMP) is a useful tool for remotely managing network devices.
Source: STREBE, Matthew and PERKINS, Charles, Firewalls 24seven, Sybex 2000, Chapter 4: Sockets and Services from a Security Viewpoint. - Question 7
Which of the following is the most important consideration in locating an alternate computing facility during the development of a disaster recovery plan?
Show answer & explanation
Correct answer: B
B-Explanation:
You do not want the alternate or recovery site located in close proximity to the original site because the same event that create the situation in the first place might very well impact that site also.-References:
OIG CBK Business Continuity and Disaster Recovery Planning (pages 368 - 369) NIST document 800-34 pg 21 - Question 8
Which of the following was designed as a more fault-tolerant topology than Ethernet, and very resilient when properly implemented?
Show answer & explanation
Correct answer: B
B-Explanation:
Token Ring was designed to be a more fault-tolerant topology than Ethernet, and can be a very resilient topology when properly implemented.
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 72. - Question 9
What is the most correct choice below when talking about the steps to resume normal operation at the primary site after the green light has been given by the salvage team?
Show answer & explanation
Correct answer: C
C-Explanation:
It's interesting to note that the steps to resume normal processing operations will be different than the steps of the recovery plan; that is, the least critical work should be brought back first to the primary site. - Question 10
Which of the following is NOT a property of the Rijndael block cipher algorithm?
Show answer & explanation
Correct answer: A
A-Explanation:
The above statement is NOT true and thus the correct answer. The maximum key size on Rijndael is 256 bits.-References:http://blogs.msdn.com/b/shawnfa/archive/2006/10/09/the-differences-between-rijndael-and-aes.aspx
Ready for the real thing?
The full SSCP simulator has every exam-style question, timed mode, and instant scoring.