SSCP Practice Exam Questions and Answers

SSCP Practice Exam




substitution (cipher) - Answer-Caesar cipher is a type of __.



collision - Answer-two plaintexts results in the same hash value



qualitative (impact analysis) - Answer-Type of impact analysis that identifies areas for immediate
improvement



IPSec (modes) - Answer-tunneling (between networks) & transport (connects devices)



classification - Answer-label placed on a piece of info/data (MAC)



clearance - Answer-



SSO (systems) - Answer-Kerberos, Federated Access, SAML

, DAC (discretionary access control) - Answer-identity-based access control; allows data owners to assign
permissions to subjects at the most basic level



non-DAC (non-discretionary access control) - Answer-access control; security admin use roles to
determine access, includes Role- and Rules-BAC



MAC (mandatory access control) - Answer-access control that uses labels to identify subjects & objects;
used by the military



Bell-LaPadula (MAC-based architecture models) - Answer-no read up, no write down; ensures
confidentiality (MAC-based architecture models)



Biba (MAC-based architecture models) - Answer-no read down, no write up; ensures integrity (MAC-
based architecture models)



Clark-Wilson (MAC-based architecture models) - Answer-ensures SoD and integrity (MAC-based
architecture models)



Chinese wall (Brewer-Nash) (MAC-based architecture models) - Answer-prevents conflict of interest &
SoD (MAC-based architecture models)



physical (OSI Layer) - Answer-OSI layer that provides a direct connection to the network



data link (OSI layer) - Answer-OSI layer that provides reliable delivery of data across the network &
establishes communication links between devices on a network



network (OSI layer) - Answer-OSI layer that provides routing for data across a network by analyzing the
IP address & determining the route to the destination computer