(ISC)2 – SSCP questions with correct answers

1. Prevention: something like a lock on the door 2. Detection: something like an alarm system 3. Recovery: actions taken after an unwanted occurrence Correct Answer-What are the three security categories? 1. Identification: user provides identification 2. Authentication: second type of identification proving the user is who they claim to be 3. Authorization: assigns rights & privileges based on user's profile after they are authenticated 4. Accounting: tracing and recording the use of assets. Correct Answer-What are the four steps of Access Control? Auditing Correct Answer-What is the act of reviewing or monitoring data obtained during the Accounting process? - Prudent Man - Due Dilligence - Due Care Correct Answer-- This concept refers to actions that may be reasonably taken (or are obvious) to safeguard corporate assets and data, as well as following best practices from similar organizations - This is verifying that a control or