Free SSCP Certification I Questions and Answers — Questions and Answers
Question 1: Which architecture best encapsulates Ethernet?
- A bus (Correct answer)
- A ring
- A star
- A mesh
Correct answer: A bus
Ethernet uses a bus topology, which means that all devices on the network are connected to a single shared communication line, called the Ethernet cable or Ethernet bus. Each device on the network can send and receive data on this shared medium.
Question 2: Which of the following items is most frequently used for identification and is not appropriate for use as an authenticator?
- Token
- Password
- Retinal scan (Correct answer)
- Username
Correct answer: Retinal scan
A retinal scan is a biometric identification method that uses unique patterns of blood vessels in the retina to identify individuals. It is primarily used for identification purposes, such as in security systems, but it is not typically used as an authenticator. An authenticator is a method used to verify an individual's identity trying to access a system or resource.
Question 3: Sam wants to test the password security on a vulnerable Linux system using John the Ripper. What documents is he going to require to do this analysis?
- /etc/passwd and /etc/shadow (Correct answer)
- /etc/shadow and /etc/user
- /etc/passwd and /etc/user
- /etc/user and /etc/account
Correct answer: /etc/passwd and /etc/shadow
John the Ripper is a popular password cracking tool used for testing the security of passwords. On a Linux system, the password-related information is stored in the /etc/passwd and /etc/shadow files.
Question 4: Recently, Ceasar put into place an intrusion prevention system meant to prevent typical network threats from harming his business. What kind of risk management approach is Ceasar employing?
- Risk transference
- Risk acceptance
- Risk avoidance
- Risk mitigation (Correct answer)
Correct answer: Risk mitigation
Risk mitigation is a risk management strategy that involves taking actions to reduce or mitigate the impact or likelihood of risks. In this case, Mike implemented an intrusion prevention system (IPS) to block common network attacks from affecting his organization. The IPS is a proactive measure that aims to detect and prevent network attacks before they can cause damage or compromise the network. By implementing the IPS, Mike is pursuing a risk mitigation strategy to reduce the risk associated with network attacks.
Question 5: Which of the following is an illustration of hardening physical infrastructure?
- Fire suppression system (Correct answer)
- Antivirus software
- Hardware-based network firewall
- Two-factor authentication
Correct answer: Fire suppression system
Physical infrastructure hardening refers to measures taken to strengthen the security and resilience of physical components of an organization's infrastructure. It involves implementing safeguards to protect physical assets from threats such as natural disasters, physical attacks, or accidents.
Question 6: Recently, Jane discovered a security problem happening on her network. What should she do right now that should be her top priority?
- Detection
- Containment (Correct answer)
- Recovery
- Eradication
Correct answer: Containment
When a security incident is detected in progress on a network, the highest priority for Tara should be containment. Containment involves taking immediate actions to isolate and limit the impact of the security incident. The goal is to prevent further spread of the incident within the network and minimize potential damage.
Question 7: To cut down on the price of running a public-facing web server, Sherra is thinking of using a self-signed certificate. What is the main danger connected to using certificates that were self-signed?
- Self-signed certificates are not trusted by default (Correct answer)
- Self-signed certificates use weak encryption
- Self-signed certificates cannot be used with most browsers
- Self-signed certificates have short expiration periods
Correct answer: Self-signed certificates are not trusted by default
Self-signed certificates are certificates that are signed by the entity they belong to, rather than being signed by a trusted third-party certificate authority (CA). The primary risk associated with the use of self-signed certificates is that they are not trusted by default.
Free SSCP Certification I Questions and Answers
Which architecture best encapsulates Ethernet?