SSCP Edusum 3 Exam with all Correct & 100% Verified
Answers |Actual Complete Update |Guaranteed to Pass
What does it mean to have an integrated information risk management system? ✔Correct
Answer-You provide the communications capabilities to bring status, state, and health
information from all countermeasures and controls, and all systems elements, to information
security managers, who can then direct timely changes in these controls in real time as required
to respond to an incident.
What role, if any, does an incident response team play in supporting any subsequent forensics
investigation? ✔Correct Answer-Since any information security incident might lead to a
follow-on forensics investigation, the team needs to make sure that any of the data they collect,
or systems they restore or rebuild, are first preserved and cataloged to meet chain-of-custody
requirements as evidence. Thus, the responders also need to be trained and certified as
investigators.
As the first responders, the team should take steps to control the scene of the incident, and
keep good logs or records of the state of systems and information throughout their response
activities. These records need to be retained in case there is a later investigation.
Management needs to make sure that the procedures used by the response team will preserve
the incident scene and information gathered during the incident response in ways that will meet
rules of evidence; if that cannot be done without interfering with prompt incident response and
recovery, management has to take responsibility for that risk.
What is the best way to secure files that are sent from workstation A via the Internet service (C)
to remote server E? ✔Correct Answer-Encrypt the data files and send them.
Betty is concerned about the use of buffer overflow attacks against a custom application
developed for use in her organization. What security control would provide the strongest
defense against these attacks? ✔Correct Answer-Parameter checking
What are information risks that cryptography cannot address? ✔Correct Answer-Even
cryptographic support for nonrepudiation cannot prove that a recipient (authorized or not)
actually read and understood or made use of the contents of a protected file or message; it can
only prove that they accessed it.
Display of data to humans, or output of data as device commands in control systems, needs to
be in an unencrypted form to be usable.
Users with legitimate access to a variety of information at one level of classification, when
decrypted for use, may be able to infer the existence or value of information at higher levels of
classification.
Microsoft's STRIDE threat assessment framework uses six categories for threats: Spoofing,
Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. If
, a penetration tester is able to modify audit logs, what STRIDE categories best describe this
issue? ✔Correct Answer-Repudiation and tampering
Which component of IPsec provides authentication, integrity, and nonrepudiation? ✔Correct
Answer-Authentication Header
What are the most common attacks that business or commercial use of cryptography might be
exposed to? ✔Correct Answer-Social engineering
Gina recently took the SSCP certification exam and then wrote a blog post that included the text
of many of the exam questions that she experienced. What aspect of the (ISC)2 code of ethics is
most directly violated in this situation? ✔Correct Answer-Advance and protect the profession.
What happens to datagrams as they are passed through the protocol stack from the Data Link
layer to the Transport layer? ✔Correct Answer-They get shorter as the headers and footers
are removed as the datagrams move from one layer to the next.
Which of the following would be used for a new certificate registration request? ✔Correct
Answer-RA
What kinds of privileges should be part of what your mandatory access control policies can
grant or deny to a requesting subject? ✔Correct Answer-Reading, writing, deleting, or asking
the system to load the object as an executable task or thread and run it
Reading or writing/modifying the metadata associated with an object
Which statement about host-based firewalls is correct? ✔Correct Answer-Host-based firewalls
can filter, restrict, or block connection attempts by programs running on the host computer to
external networks.
Which one of the following is not considered PII under U.S. federal government regulations?
✔Correct Answer-ZIP code
During a port scan, Susan discovers a system running services on TCP and UDP 137-139 and TCP
445, as well as TCP 1433. What type of system is she likely to find if she connects to the
machine? ✔Correct Answer-A Windows SQL server
During a third-party vulnerability scan and security test, Danielle's employer recently discovered
that the embedded systems that were installed to manage her company's new buildings have a
severe remote access vulnerability. The manufacturer has gone out of business, and there is no
patch or update for the devices.
What should Danielle recommend that her employer do about the hundreds of devices that are
vulnerable? ✔Correct Answer-Move the devices to a secured network segment
Answers |Actual Complete Update |Guaranteed to Pass
What does it mean to have an integrated information risk management system? ✔Correct
Answer-You provide the communications capabilities to bring status, state, and health
information from all countermeasures and controls, and all systems elements, to information
security managers, who can then direct timely changes in these controls in real time as required
to respond to an incident.
What role, if any, does an incident response team play in supporting any subsequent forensics
investigation? ✔Correct Answer-Since any information security incident might lead to a
follow-on forensics investigation, the team needs to make sure that any of the data they collect,
or systems they restore or rebuild, are first preserved and cataloged to meet chain-of-custody
requirements as evidence. Thus, the responders also need to be trained and certified as
investigators.
As the first responders, the team should take steps to control the scene of the incident, and
keep good logs or records of the state of systems and information throughout their response
activities. These records need to be retained in case there is a later investigation.
Management needs to make sure that the procedures used by the response team will preserve
the incident scene and information gathered during the incident response in ways that will meet
rules of evidence; if that cannot be done without interfering with prompt incident response and
recovery, management has to take responsibility for that risk.
What is the best way to secure files that are sent from workstation A via the Internet service (C)
to remote server E? ✔Correct Answer-Encrypt the data files and send them.
Betty is concerned about the use of buffer overflow attacks against a custom application
developed for use in her organization. What security control would provide the strongest
defense against these attacks? ✔Correct Answer-Parameter checking
What are information risks that cryptography cannot address? ✔Correct Answer-Even
cryptographic support for nonrepudiation cannot prove that a recipient (authorized or not)
actually read and understood or made use of the contents of a protected file or message; it can
only prove that they accessed it.
Display of data to humans, or output of data as device commands in control systems, needs to
be in an unencrypted form to be usable.
Users with legitimate access to a variety of information at one level of classification, when
decrypted for use, may be able to infer the existence or value of information at higher levels of
classification.
Microsoft's STRIDE threat assessment framework uses six categories for threats: Spoofing,
Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege. If
, a penetration tester is able to modify audit logs, what STRIDE categories best describe this
issue? ✔Correct Answer-Repudiation and tampering
Which component of IPsec provides authentication, integrity, and nonrepudiation? ✔Correct
Answer-Authentication Header
What are the most common attacks that business or commercial use of cryptography might be
exposed to? ✔Correct Answer-Social engineering
Gina recently took the SSCP certification exam and then wrote a blog post that included the text
of many of the exam questions that she experienced. What aspect of the (ISC)2 code of ethics is
most directly violated in this situation? ✔Correct Answer-Advance and protect the profession.
What happens to datagrams as they are passed through the protocol stack from the Data Link
layer to the Transport layer? ✔Correct Answer-They get shorter as the headers and footers
are removed as the datagrams move from one layer to the next.
Which of the following would be used for a new certificate registration request? ✔Correct
Answer-RA
What kinds of privileges should be part of what your mandatory access control policies can
grant or deny to a requesting subject? ✔Correct Answer-Reading, writing, deleting, or asking
the system to load the object as an executable task or thread and run it
Reading or writing/modifying the metadata associated with an object
Which statement about host-based firewalls is correct? ✔Correct Answer-Host-based firewalls
can filter, restrict, or block connection attempts by programs running on the host computer to
external networks.
Which one of the following is not considered PII under U.S. federal government regulations?
✔Correct Answer-ZIP code
During a port scan, Susan discovers a system running services on TCP and UDP 137-139 and TCP
445, as well as TCP 1433. What type of system is she likely to find if she connects to the
machine? ✔Correct Answer-A Windows SQL server
During a third-party vulnerability scan and security test, Danielle's employer recently discovered
that the embedded systems that were installed to manage her company's new buildings have a
severe remote access vulnerability. The manufacturer has gone out of business, and there is no
patch or update for the devices.
What should Danielle recommend that her employer do about the hundreds of devices that are
vulnerable? ✔Correct Answer-Move the devices to a secured network segment
