SSCP Certification SSCP Certification II 2

Question 1

Which cryptographic mode of operation turns a block cipher into a stream cipher by XORing plaintext with an encrypted counter value?

Accepted Answer

CTR

Answer

CBC

Answer

ECB

Answer

OFB

Question 2

An organization wants to ensure that no single employee can both approve a purchase order and issue the payment. Which security principle does this enforce?

Accepted Answer

Separation of duties

Answer

Least privilege

Answer

Need to know

Answer

Defense in depth

Question 3

Which type of malware hides its presence by modifying the operating system kernel to intercept and falsify system calls?

Accepted Answer

Rootkit

Answer

Ransomware

Answer

Adware

Answer

Worm

Question 4

A security analyst uses a tool that intercepts and displays all traffic between a client and a server on the same subnet. What type of attack does this technique represent?

Accepted Answer

ARP poisoning / MitM

Answer

Replay attack

Answer

Smurf attack

Answer

DNS hijacking

Question 5

Which access control model assigns permissions based on job functions defined by the organization rather than individual user identities?

Accepted Answer

RBAC

Answer

DAC

Answer

MAC

Answer

ABAC

Question 6

What is the PRIMARY purpose of a certificate revocation list (CRL) in a PKI environment?

Accepted Answer

To publish certificates that are no longer valid before their expiry date

Answer

To list all trusted root certificates

Answer

To distribute new certificates to endpoints

Answer

To store encrypted private keys

Question 7

During a penetration test, the tester has no prior knowledge of the target environment. Which testing approach best describes this scenario?

Accepted Answer

Black-box testing

Answer

White-box testing

Answer

Gray-box testing

Answer

Crystal-box testing