SSCP

A worm recently infected the company network. You have identified that this issue occured due to employees accessing a malicious web site. You need to prevent employees from accessing this site in the future. What should you do? correct answer: Configure an ACL on the border router What is defined as the likelihood that a flaw in system security will be breached? correct answer: Risk You have been hired as a security consultant for a company. You have performed a vulnerability scan on th...

-

22 pages

Written in 2022/2023

Grade A+

Classroom

Incidents are what? correct answer: Events that are violations or imminent treat of a violation of computer security policies, acceptable use policies or standard security practices Are events incidents? correct answer: no, but all incidents are events What are Incident handling preparations? correct answer: Developing an incident response policy Acquire tools for analysis Train employees on handling What might be included in developing an incident response policy? correct answer: ...

-

10 pages

Written in 2022/2023

Grade A+

Classroom

Sscp Fedvte Exam / Questions And Verified Answers 2023/2024 / All Correct.

-

2 pages

Written in 2023/2024

Grade A

onlinetutor2025

SSCP FEDVTE EXAM / 120+ QUESTIONS AND VERIFIED ANSWERS 2023/2024 / ALL CORRECT. SSCP Test Questions 2023 1. B: DES - Data Encryption standard has a 128 bit key and is very difficult to break. A. True B. False 2. B: What is the main difference between computer abuse and computer crime? A. Amount of damage B. Intentions of the perpetrator C. Method of compromise D. Abuse = company insider; crime = company outsider 3. C: A standardized list of the most common security weaknesses and e...

-

23 pages

Written in 2023/2024

Grade A+

onlinetutor2025

Sscp Fedvte Exam / Questions And Verified Answers 2023/2024 / All Correct

-

2 pages

Written in 2023/2024

Grade A+

lectdenis

SSCP FEDVTE EXAM / 120+ QUESTIONS AND VERIFIED ANSWERS 2023/2024 / ALL CORRECT. SSCP Test Questions 2023 1. B: DES - Data Encryption standard has a 128 bit key and is very difficult to break. A. True B. False 2. B: What is the main difference between computer abuse and computer crime? A. Amount of damage B. Intentions of the perpetrator C. Method of compromise D. Abuse = company insider; crime = company outsider 3. C: A standardized list of the most common security weaknesses and e...

-

23 pages

Written in 2023/2024

Grade A+

lectdenis

DES - Data Encryption standard has a 128 bit key and is very difficult to break. A. True B. False correct answer: B What is the main difference between computer abuse and computer crime? A. Amount of damage B. Intentions of the perpetrator C. Method of compromise D. Abuse = company insider; crime = company outsider correct answer: B A standardized list of the most common security weaknesses and exploits is the __________. A. SANS Top 10 B. CSI/FBI Computer Crime Study C. C...

-

47 pages

Written in 2022/2023

Grade A+

Classroom

CIANA Security Paradigm correct answer: 1. Confidentiality 2. Integrity 3. Authorization 4. Nonrepudiation 5. Authentication Confidentiality correct answer: violated if any process or person can read, copy, redistribute, or make use of data we deem private or of competitive advantage worthy of protection as trade secrets, proprietary, or restricted information ; the first of the CIANA security paradigm ; sharing secrets ; legal and ethical concept abut privileged communications or priv...

-

35 pages

Written in 2022/2023

Grade A+

Classroom

Referred to as the AAA of access control: authentication, authorization, and accounting correct answer: AAA, Triple A A list of subjects and assigned rights used in access control. correct answer: access control list (ACL) Referred to as the AAA of access control: authentication, authorization, and accounting. correct answer: AAA/ Triple A A list of subjects and assigned rights used in access control. correct answer: access control list (ACL) Formal acceptance by management that...

-

22 pages

Written in 2022/2023

Grade A+

Classroom

ARO correct answer: Incidents/year What does STRIDE stand for? correct answer: Spoofing Tampering Repudiation Information disclosure Denial of service Elevation of privilege Reduction Analysis correct answer: Breaks a system down into smaller components What does repeated software deficiencies indicate? correct answer: A need for a software architecture change What should threat modeling do? correct answer: Inform the rest of the security program Honeypot correct answer...

-

17 pages

Written in 2022/2023

Grade A+

Classroom

Availability correct answer: Refers to the ability to access and use information systems when and as needed to support an organization's operations. Breach correct answer: The intentional or unintentional release of secure information to an untrusted environment. CMDB correct answer: A configuration management database (CMDB) is a repository that contains a collection of IT assets that are referred to as configuration items. Compensating Controls correct answer: Introduced when the...

-

10 pages

Written in 2022/2023

Grade A+

Classroom

What is salt in the IT World? correct answer: random piece of additional input data that provided to a one way hashing function Salting is often used with what? correct answer: passwords and passphrases In Salting what is stored? correct answer: the hash is stored not the actual password or passphrase and the salt is also stored What does salting ensure? correct answer: that each user password is hashed uniquely What attack does salting defend against? correct answer: Attack on ...

-

4 pages

Written in 2022/2023

Grade A+

Classroom

Caesar cipher is a type of __. correct answer: substitution (cipher) two plaintexts results in the same hash value correct answer: collision Type of impact analysis that identifies areas for immediate improvement correct answer: qualitative (impact analysis) tunneling (between networks) & transport (connects devices) correct answer: IPSec (modes) label placed on a piece of info/data (MAC) correct answer: classification correct answer: clearance Kerberos, Federated Access...

-

10 pages

Written in 2022/2023

Grade A+

Classroom

DES - Data Encryption standard has a 128 bit key and is very difficult to break. A. True B. False correct answer: B What is the main difference between computer abuse and computer crime? A. Amount of damage B. Intentions of the perpetrator C. Method of compromise D. Abuse = company insider; crime = company outsider correct answer: B A standardized list of the most common security weaknesses and exploits is the __________. A. SANS Top 10 B. CSI/FBI Computer Crime Study C. C...

-

20 pages

Written in 2022/2023

Grade A+

Classroom

Access Control Object correct answer: A passive entity that typically receives or contains some form of data. Access Control Subject correct answer: An active entity and can be any user, program, or process that requests permission to cause data to flow from an access control object to the access control subject or between access control objects. Asynchronous Password Token correct answer: A one-time password is generated without the use of a clock, either from a one-time pad or cryptog...

-

10 pages

Written in 2022/2023

Grade A+

Classroom

The most common security weaknesses and exploits are in which standardized list? correct answer: D. CVE - Common Vulnerabilities and Exposures Choose the password configuration rules enforced by the P Windows add-on. correct answer: C. Password must have a combination of upper case, lower case, numbers, and special characters; including a 6 character minimum password length A computer forensics specialist should be attempting to attain which ultimate goal? correct answer: B. Preserve el...

-

3 pages

Written in 2022/2023

Grade A+

Classroom

How many years of experience are required to earn the Associate of (ISC)2 designation? A. Zero B. One C. Two D. Five correct answer: [Security Fundamentals] A. You don't need to meet the experience requirement to earn the Associate of (ISC)2 designation, so zero years of experience are required. The SSCP certification requires one year of direct full-time security work experience. If you earn the Associate of (ISC)2 designation, you have two years from the date (ISC)2 notifies you t...

-

77 pages

Written in 2022/2023

Grade A+

Classroom

Risk refers to what? correct answer: The probability of an incident occurring that can result in some negative impact Effective way to ensure zero risk? correct answer: None not engaging in the activity that introduces that risk Risk Register correct answer: Detailed document of compiled risks Output of risk assessment Why can sharing threat intelligence be complicated? correct answer: Legal Security Privacy How is the impact of a risk measured? correct answer: Through risk...

-

4 pages

Written in 2022/2023

Grade A+

Classroom

What makes up the CIA triad? correct answer: Confidentiality Integrity Availability A term that refers to the minimum amount of people to perform a highly sensitive action. correct answer: M of N control multiple agents with the capability (M), and the minimum number of these agents (N) in order to perform the task where one person is required to complete each part of a task. Using the example of key escrow, one person might access the key contained in key escrow while a second person m...

-

58 pages

Written in 2022/2023

Grade A+

Classroom

[Security Fundamentals] How many years of experience are required to earn the Associate of (ISC)2 designation? A. Zero B. One C. Two D. Five A [Security Fundamentals] What are the three elements of the security triad? A. Authentication authorization, and accounting B. Confidentiality, integrity, and availability C. Identification, authentication, and authorization D. Confidentiality, integrity, and authorization B [Security Fundamentals] Who is responsible for...

-

58 pages

Written in 2022/2023

Grade A+

Classroom