SSCP Certification SSCP Access Control Systems 4

Question 1

A firewall rule denies all traffic not explicitly permitted. This implements which access control philosophy?

Accepted Answer

Default deny (implicit deny)

Answer

Default deny (implicit deny) blocks all traffic unless a rule explicitly permits it, reducing attack surface by closing all paths not intentionally opened.

Question 2

Which type of access control list (ACL) is typically associated with network devices like routers and firewalls?

Accepted Answer

Network ACLs

Answer

Network ACLs on routers and firewalls filter traffic based on IP addresses, ports, and protocols to control network-layer access.

Question 3

Single Sign-On (SSO) improves security primarily by:

Accepted Answer

Reducing password fatigue and encouraging stronger, fewer credentials

Answer

SSO reduces the number of credentials users must manage, decreasing password reuse and encouraging stronger passwords for the single login.

Question 4

A subject at SECRET level attempting to write data to a CONFIDENTIAL object would violate which Bell-LaPadula rule?

Accepted Answer

Star (*) Property (no write down)

Answer

The Star (*) Property prohibits writing to objects at a lower classification level, preventing information from leaking downward.

Question 5

What is a primary risk of using shared accounts in a multi-user environment?

Accepted Answer

Loss of individual accountability and audit trail integrity

Answer

Shared accounts make it impossible to attribute actions to a specific individual, destroying accountability and complicating forensic investigations.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Access Control Systems 4