(ISC)² Systems Security Certified
Practitioner (SSCP) Longle Exam
Questions And Verified Answers
\Q\.A unique user or process identity used for accountability
a)Identification
b)Authentication - ANSWERS✔-a
\Q\.Mass Lockouts
a)Happens when an user forgets his/her password
b)Happens when a number of failed login attempts occur - ANSWERS✔-b
\Q\.Example of behavioral biometrics
a)Signature analysis
b)Fingerprint verification - ANSWERS✔-a
\Q\.Ensures each user's privilege continues to be appropriate and reflects any changes in the
user's access requirements as his/her role and/or responsibilities within the enterprise change.
a)Periodic review of access levels
b)Clearance - ANSWERS✔-a
\Q\.The process of verification of the identity presented to the access control system belongs to
the party that has presented it.
a)Authorization
,b)Authentication - ANSWERS✔-b
\Q\.What are the steps involved in biometric authentication solution process? Choose all that
apply.
a)Enrollment process
b)Identification process
c)Verification process - ANSWERS✔-a c
\Q\.Devices that make use of user's personal physiological data in access control application.
Choose all that apply.
a)Hand geometry technology
b)Signature analysis
c)Finger print verification technology
d)Voice pattern recognition - ANSWERS✔-a c
\Q\.Examples of behavioral biometrics.
a)Eye features scan
b)Signature analysis
c)Retina scan
d)Voice pattern recognition - ANSWERS✔-b d
\Q\.How is biometric accuracy measured?
a)Type 1 error
b)Type 2 error
c)Type 3 error
d)Type 4 error - ANSWERS✔-a b
,\Q\.The aim of NGI is to offer state of the art biometric identification services to improve the
accuracy of the system.
a)True
b)False - ANSWERS✔-a
\Q\.Used in addition to or in place of a password.
a)Tokens
b)Smart card - ANSWERS✔-a
\Q\.This methodology aids in reducing the risk that a user would walk away from a device or
system he/she has authenticated access to before properly logging out.
a)Time outs
b)Periodic authentication - ANSWERS✔-b
\Q\.This is a type of authentication that involves the target system calling a registered phone
number and requesting that the user enter his/her password over the phone prior to allowing
the user to log in.
a)Peripheral device recognition
b)Out of band authentication - ANSWERS✔-b
\Q\.Asynchronous password token is a one time password generated without the use of clock
a)False
b)True - ANSWERS✔-b
\Q\.Strong authentication requires which of the following?
a)At least two of the three authentication factors (knowledge/ownership/characteristic)
, c)Role based access control
d)One-time password scheme
e)Biometrics - ANSWERS✔-a
\Q\.Security tokens are used to prove one's identity electronically.
a)True
b)False - ANSWERS✔-a
\Q\.This type of tokens have neither a physical nor logical connection to the client computer.
a)Connected tokens
b)Disconnected tokens - ANSWERS✔-b
\Q\.This type of tokens form a logical connection to the client computer.
a)Contactless tokens
b)Connected tokens - ANSWERS✔-a
\Q\.Applications of smart card
a)Healthcare applications
b)Secure identity applications - ANSWERS✔-a b
\Q\.An authentication mechanism that allows a single identity to be shared across multiple
applications.
a)Single sign-on
b)Multi-factor authentication - ANSWERS✔-a
Practitioner (SSCP) Longle Exam
Questions And Verified Answers
\Q\.A unique user or process identity used for accountability
a)Identification
b)Authentication - ANSWERS✔-a
\Q\.Mass Lockouts
a)Happens when an user forgets his/her password
b)Happens when a number of failed login attempts occur - ANSWERS✔-b
\Q\.Example of behavioral biometrics
a)Signature analysis
b)Fingerprint verification - ANSWERS✔-a
\Q\.Ensures each user's privilege continues to be appropriate and reflects any changes in the
user's access requirements as his/her role and/or responsibilities within the enterprise change.
a)Periodic review of access levels
b)Clearance - ANSWERS✔-a
\Q\.The process of verification of the identity presented to the access control system belongs to
the party that has presented it.
a)Authorization
,b)Authentication - ANSWERS✔-b
\Q\.What are the steps involved in biometric authentication solution process? Choose all that
apply.
a)Enrollment process
b)Identification process
c)Verification process - ANSWERS✔-a c
\Q\.Devices that make use of user's personal physiological data in access control application.
Choose all that apply.
a)Hand geometry technology
b)Signature analysis
c)Finger print verification technology
d)Voice pattern recognition - ANSWERS✔-a c
\Q\.Examples of behavioral biometrics.
a)Eye features scan
b)Signature analysis
c)Retina scan
d)Voice pattern recognition - ANSWERS✔-b d
\Q\.How is biometric accuracy measured?
a)Type 1 error
b)Type 2 error
c)Type 3 error
d)Type 4 error - ANSWERS✔-a b
,\Q\.The aim of NGI is to offer state of the art biometric identification services to improve the
accuracy of the system.
a)True
b)False - ANSWERS✔-a
\Q\.Used in addition to or in place of a password.
a)Tokens
b)Smart card - ANSWERS✔-a
\Q\.This methodology aids in reducing the risk that a user would walk away from a device or
system he/she has authenticated access to before properly logging out.
a)Time outs
b)Periodic authentication - ANSWERS✔-b
\Q\.This is a type of authentication that involves the target system calling a registered phone
number and requesting that the user enter his/her password over the phone prior to allowing
the user to log in.
a)Peripheral device recognition
b)Out of band authentication - ANSWERS✔-b
\Q\.Asynchronous password token is a one time password generated without the use of clock
a)False
b)True - ANSWERS✔-b
\Q\.Strong authentication requires which of the following?
a)At least two of the three authentication factors (knowledge/ownership/characteristic)
, c)Role based access control
d)One-time password scheme
e)Biometrics - ANSWERS✔-a
\Q\.Security tokens are used to prove one's identity electronically.
a)True
b)False - ANSWERS✔-a
\Q\.This type of tokens have neither a physical nor logical connection to the client computer.
a)Connected tokens
b)Disconnected tokens - ANSWERS✔-b
\Q\.This type of tokens form a logical connection to the client computer.
a)Contactless tokens
b)Connected tokens - ANSWERS✔-a
\Q\.Applications of smart card
a)Healthcare applications
b)Secure identity applications - ANSWERS✔-a b
\Q\.An authentication mechanism that allows a single identity to be shared across multiple
applications.
a)Single sign-on
b)Multi-factor authentication - ANSWERS✔-a
