Free SSCP Certification II Questions and Answers

Question 1

Which of the following is an example of a view-based access control system?

Accepted Answer

Constrained User Interface

Answer

Side Channel

Answer

Audit Control

Answer

Temporal Constraint

Question 2

Which of the following allows for HTTP traffic to be sent securely?

Accepted Answer

Transport Layer Security (TLS)

Answer

Kerberos

Answer

Layer 2 Tunneling Protocol (L2TP)

Answer

Secure Remote Password (SRP)

Question 3

Which of the following is one of the Biba model's three main rules?

Accepted Answer

A subject cannot modify an object that has a lower integrity level.

Answer

A subject cannot read or modify an object of either a lower or higher integrity level.

Answer

A subject cannot request services from an object that has a higher integrity level

Answer

A subject can read an object that has a lower integrity level.

Question 4

What one of the following is a network device that makes use of context-based access control?

Accepted Answer

Stateful inspection firewall

Answer

Network IDS

Answer

Static packet filter

Answer

VLAN

Question 5

What behavioral characteristics are present in a biometric device?

Accepted Answer

Voice pattern and Keystroke dynamics

Answer

Fingerprint and facial recognition

Answer

Signature dynamics and Iris scan

Answer

Retina scan and Hand geometry

Question 6

What distinguishes a synchronous password token from an asynchronous password token?

Accepted Answer

Synchronous tokens are generated with the use of a timer while asynchronous tokens do not use a clock for generation.

Answer

Asynchronous tokens are generated with the use of a timer while synchronous tokens do not use a clock for generation.

Answer

Asynchronous tokens contain a password which is physically hidden and then transmitted for each authentication while synchronous tokens do not.

Answer

Synchronous tokens contain a password which is physically hidden and then transmitted for each authentication while asynchronous tokens do not

Question 7

Which one of the following should each side employ in symmetric key cryptography?

Accepted Answer

Previously exchanged secret key

Answer

Public key exchanged with the message

Answer

Key encrypting key

Answer

Randomly generated value unknown to anyone