ISC2 SSCP QUESTIONS AND ANSWERS | VERIFIED
AND WELL DETAILED ANSWERS | PLUS RATIONALES
| GUARANTEED PASS | LATEST EXAM UPDATE |
EXAM PREP | STUDY GUIDE | PRACTICE TEST
,Domain 1: Access Controls
1. Which access control model uses a central authority to determine and assign permissions based on an
individual's role?
A) DAC
B) MAC
C) RBAC
D) ABAC
Answer: C
Rationale: Role-Based Access Control (RBAC) assigns permissions to roles rather than individuals. Users are
assigned to roles, and roles hold the permissions. DAC lets owners set permissions; MAC uses
labels/clearances; ABAC uses attributes.
2. In Mandatory Access Control (MAC), what determines whether a subject can access an object?
A) The object owner's discretion
B) Security labels and clearances
,C) Role membership
D) Group policy
Answer: B
Rationale: MAC uses sensitivity labels on objects and clearance levels on subjects. Access is granted when the
subject's clearance dominates the object's label, per the system policy.
3. Which principle states that a user should have only the minimum access necessary to perform their job?
A) Separation of duties
B) Least privilege
C) Need-to-know
D) Defense in depth
Answer: B
Rationale: Least privilege means granting only the minimum permissions required to perform assigned tasks.
Need-to-know is related but focuses on specific information access; separation of duties prevents fraud.
, 4. What is the primary purpose of separation of duties?
A) To increase system performance
B) To prevent one person from completing a critical task alone
C) To reduce password complexity
D) To simplify auditing
Answer: B
Rationale: Separation of duties divides critical functions among multiple people so no single individual can
commit fraud or error without detection.
5. Which biometric error rate represents the probability that an unauthorized user is accepted?
A) FRR
B) FAR
AND WELL DETAILED ANSWERS | PLUS RATIONALES
| GUARANTEED PASS | LATEST EXAM UPDATE |
EXAM PREP | STUDY GUIDE | PRACTICE TEST
,Domain 1: Access Controls
1. Which access control model uses a central authority to determine and assign permissions based on an
individual's role?
A) DAC
B) MAC
C) RBAC
D) ABAC
Answer: C
Rationale: Role-Based Access Control (RBAC) assigns permissions to roles rather than individuals. Users are
assigned to roles, and roles hold the permissions. DAC lets owners set permissions; MAC uses
labels/clearances; ABAC uses attributes.
2. In Mandatory Access Control (MAC), what determines whether a subject can access an object?
A) The object owner's discretion
B) Security labels and clearances
,C) Role membership
D) Group policy
Answer: B
Rationale: MAC uses sensitivity labels on objects and clearance levels on subjects. Access is granted when the
subject's clearance dominates the object's label, per the system policy.
3. Which principle states that a user should have only the minimum access necessary to perform their job?
A) Separation of duties
B) Least privilege
C) Need-to-know
D) Defense in depth
Answer: B
Rationale: Least privilege means granting only the minimum permissions required to perform assigned tasks.
Need-to-know is related but focuses on specific information access; separation of duties prevents fraud.
, 4. What is the primary purpose of separation of duties?
A) To increase system performance
B) To prevent one person from completing a critical task alone
C) To reduce password complexity
D) To simplify auditing
Answer: B
Rationale: Separation of duties divides critical functions among multiple people so no single individual can
commit fraud or error without detection.
5. Which biometric error rate represents the probability that an unauthorized user is accepted?
A) FRR
B) FAR
