SSA TEST QUESTIONS AND ANSWERS | LATEST SSA EXAM STUDY GUIDE &
PRACTICE TEST 2026/2027
Name the six main concepts of SECURITY. - ANS ✔✔Authentication, authorization,
confidentiality, integrity, availability, non repudiation
What does the term TANSTAAFL mean and what does it suggest? - ANS ✔✔There ain't no such
thing as a free lunch. It suggests that programs should not be made in a complicated way
There are six main things to consider when securing a system - ANS ✔✔What, where,
TANSTAAFL, location of control, the layer problem, education
Security goes through five stages... - ANS ✔✔Security policy, design, implementation,
monitoring and maintenance, recovery
Which five things will a risk assessment cover in system defence? - ANS ✔✔Internet, intranet,
server, os and physical
What is SNORT and what advantages does it have? - ANS ✔✔Open source IDS, highly
configurable
Difference between stateless firewalls and stateful firewalls - ANS ✔✔Stateless are fast and
simple, stateful work only on connection oriented protocols
Which principles are taken into account when protecting server application? - ANS ✔✔update,
least permission, privilege separation, least functionality and service separation
Which three terms do SD3 implement? - ANS ✔✔Secure by design, secure by default, secure in
deployment
, Which principle is securing by default related with? - ANS ✔✔Least privilege
What does secure in deployment mean? - ANS ✔✔patching quickly and securely
What does the principle of "minimizing attack surface" mean? - ANS ✔✔Add only relevant
features to the app and give access to relevant users.
What does the principle of least privilege mean? - ANS ✔✔Accounts must have the least
amount of privilege required to perform their processes
What does the principle of privilege separation mean? - ANS ✔✔Users have only minimal rights
and access to the resources that they need.
What does the principle of employ secure by default mean? - ANS ✔✔A new user must take
steps to obtain higher privileges
What does the principle of "fail securely" mean? - ANS ✔✔Failure should not give the user
additional privilege nor sensitive information
What does the principle of "avoiding security by obscurity" mean? - ANS ✔✔There should be
enough security controls to keep your app safe without needing to hide core functionality or
source code
What is the KISS principle, what does it stand for and what is its target? - ANS ✔✔Keep Security
Simple, its target is to avoid use of sophisticated architecture
How should security issues be fixed (in a right way)? - ANS ✔✔Developing a test to understand
the root cause of the issue, repairing it and testing the repair
PRACTICE TEST 2026/2027
Name the six main concepts of SECURITY. - ANS ✔✔Authentication, authorization,
confidentiality, integrity, availability, non repudiation
What does the term TANSTAAFL mean and what does it suggest? - ANS ✔✔There ain't no such
thing as a free lunch. It suggests that programs should not be made in a complicated way
There are six main things to consider when securing a system - ANS ✔✔What, where,
TANSTAAFL, location of control, the layer problem, education
Security goes through five stages... - ANS ✔✔Security policy, design, implementation,
monitoring and maintenance, recovery
Which five things will a risk assessment cover in system defence? - ANS ✔✔Internet, intranet,
server, os and physical
What is SNORT and what advantages does it have? - ANS ✔✔Open source IDS, highly
configurable
Difference between stateless firewalls and stateful firewalls - ANS ✔✔Stateless are fast and
simple, stateful work only on connection oriented protocols
Which principles are taken into account when protecting server application? - ANS ✔✔update,
least permission, privilege separation, least functionality and service separation
Which three terms do SD3 implement? - ANS ✔✔Secure by design, secure by default, secure in
deployment
, Which principle is securing by default related with? - ANS ✔✔Least privilege
What does secure in deployment mean? - ANS ✔✔patching quickly and securely
What does the principle of "minimizing attack surface" mean? - ANS ✔✔Add only relevant
features to the app and give access to relevant users.
What does the principle of least privilege mean? - ANS ✔✔Accounts must have the least
amount of privilege required to perform their processes
What does the principle of privilege separation mean? - ANS ✔✔Users have only minimal rights
and access to the resources that they need.
What does the principle of employ secure by default mean? - ANS ✔✔A new user must take
steps to obtain higher privileges
What does the principle of "fail securely" mean? - ANS ✔✔Failure should not give the user
additional privilege nor sensitive information
What does the principle of "avoiding security by obscurity" mean? - ANS ✔✔There should be
enough security controls to keep your app safe without needing to hide core functionality or
source code
What is the KISS principle, what does it stand for and what is its target? - ANS ✔✔Keep Security
Simple, its target is to avoid use of sophisticated architecture
How should security issues be fixed (in a right way)? - ANS ✔✔Developing a test to understand
the root cause of the issue, repairing it and testing the repair
