[Apr-2023] SSCP exam torrent ISC study guide [Q144-Q161]

4.3/5 - (3 votes)

[Apr-2023] SSCP exam torrent ISC study guide

Use Valid New SSCP Test Notes & SSCP Valid Exam Guide

Risk Identification, Analysis, & Monitoring (15%):

Operating & Maintaining Monitoring Systems – This area includes the information about logging, events of interest, source systems, as well as regulatory and legal concerns;
Understanding the Process of Risk Management – It includes risk visibility & reporting, risk treatment, risk management frameworks, and risk management concepts;
Performing Various Security Evaluation Activities – This objective covers audit finding remediation, remediation validation, interpreting & reporting testing and scanning results, as well as participating in security testing;
Analyzing Monitoring Results – As for this domain, it requires the students’ skills in performing event data analysis, finding security anomalies and baselines, as well as your knowledge about the visualization, trends, and metrics. It also covers their expertise in documenting and communicating findings.

The (ISC)2 Systems Security Certified Practitioner certification exam validates the candidates’ technical abilities to monitor, administer, and implement IT infrastructure using security policy, procedures, and best practices according to the principles provided by cybersecurity experts.

NEW QUESTION 144
Which of the following access control techniques best gives the security officers the ability to specify and enforce enterprise-specific security policies in a way that maps naturally to an organization’s structure?

Access control lists

Discretionary access control

Role-based access control

Non-mandatory access control

NEW QUESTION 145
Which of the following is NOT a valid reason to use external penetration service firms rather than corporate resources?

They are more cost-effective

They offer a lack of corporate bias

They use highly talented ex-hackers

They ensure a more complete reporting

NEW QUESTION 146
In order to be able to successfully prosecute an intruder:

A point of contact should be designated to be responsible for communicating with law enforcement and other external agencies.

A proper chain of custody of evidence has to be preserved.

Collection of evidence has to be done following predefined procedures.

Whenever possible, analyze a replica of the compromised resource, not the original, thereby avoiding inadvertently tamping with evidence.

NEW QUESTION 147
Failure of a contingency plan is usually:

A technical failure.

A management failure.

Because of a lack of awareness.

Because of a lack of training.

NEW QUESTION 148
The ___________ protocol converts IP addresses (logical) to MAC Addresses (physical)

IPSEC

ARP

DARP

DNS

None of the above

NEW QUESTION 149
In biometric identification systems, at the beginning, it was soon apparent that truly positive identification could only be based on :

sex of a person

physical attributes of a person

age of a person

voice of a person

NEW QUESTION 150
You have been tasked to develop an effective information classification program. Which one of the following steps should be performed first?

Establish procedures for periodically reviewing the classification and ownership

Specify the security controls required for each classification level

Identify the data custodian who will be responsible for maintaining the security level of data

Specify the criteria that will determine how data is classified

NEW QUESTION 151
Which of the following access control models requires security clearance for subjects?

Identity-based access control

Role-based access control

Discretionary access control

Mandatory access control

NEW QUESTION 152
Which of the following determines that the product developed meets the projects goals?

verification

validation

concurrence

accuracy

NEW QUESTION 153
When backing up an applications system’s data, which of the following is a key question to be answered first?

When to make backups

Where to keep backups

What records to backup

How to store backups

NEW QUESTION 154
Which of the following computer crime is MORE often associated with INSIDERS?

IP spoofing

Password sniffing

Data diddling

Denial of service (DOS)

NEW QUESTION 155
Which of the following is not a logical control when implementing logical access security?

access profiles.

userids.

employee badges.

passwords.

NEW QUESTION 156
There are parallels between the trust models in Kerberos and Public Key Infrastructure (PKI). When we compare them side by side, Kerberos tickets correspond most closely to which of the following?

public keys

private keys

public-key certificates

private-key certificates

NEW QUESTION 157
As per the Orange Book, what are two types of system assurance?

Operational Assurance and Architectural Assurance.

Design Assurance and Implementation Assurance.

Architectural Assurance and Implementation Assurance.

Operational Assurance and Life-Cycle Assurance.

NEW QUESTION 158
In discretionary access environments, which of the following entities is authorized to grant information access to other people?

Manager

Group Leader

Security Manager

Data Owner

NEW QUESTION 159
Which of the following is used by RADIUS for communication between clients and servers?

TCP

SSL

UDP

SSH

NEW QUESTION 160
If any server in the cluster crashes, processing continues transparently, however, the cluster suffers some performance degradation. This implementation is sometimes called a:

server farm

client farm

cluster farm

host farm

NEW QUESTION 161
Which layer of the DoD TCP/IP Model ensures error-free delivery and packet sequencing?

Internet layer

Network access layer

Host-to-host

Application layer