SSCP Certification SSCP Access Control Systems 2

Question 1

Which access control model assigns permissions based on the sensitivity label of an object and the clearance level of a subject?

Accepted Answer

Mandatory Access Control (MAC)

Answer

MAC uses sensitivity labels on objects and clearance levels on subjects to enforce access decisions centrally, independent of user discretion.

Question 2

A system logs every failed authentication attempt and alerts the security team after five consecutive failures. What security control does this represent?

Accepted Answer

Detective control

Answer

Logging and alerting on failed attempts is a detective control because it identifies and reports suspicious activity without stopping it directly.

Question 3

What is the primary purpose of a Trusted Path in an operating system?

Accepted Answer

Providing a secure communication channel between the user and the TCB

Answer

A Trusted Path ensures that communications between a user and the Trusted Computing Base (TCB) cannot be intercepted or spoofed by malicious software.

Question 4

Under the Bell-LaPadula model, the 'no read up' property is formally called:

Accepted Answer

Simple Security Property

Answer

The Simple Security Property (ss-property) prevents subjects from reading objects at a higher classification level than their clearance.

Question 5

An organization wants to grant contractors temporary access to a project folder that automatically expires after 30 days. Which mechanism best supports this?

Accepted Answer

Capability tokens with embedded expiration

Answer

Capability tokens can embed expiration dates, ensuring access is automatically revoked when the token expires without manual ACL changes.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Access Control Systems 2