SSCP Certification SSCP Certification II 2

Question 1

Which cryptographic mode of operation turns a block cipher into a stream cipher by XORing plaintext with an encrypted counter value?

Accepted Answer

CTR

Answer

Counter (CTR) mode encrypts successive counter values and XORs the output with plaintext, effectively creating a keystream like a stream cipher.

Question 2

An organization wants to ensure that no single employee can both approve a purchase order and issue the payment. Which security principle does this enforce?

Accepted Answer

Separation of duties

Answer

Separation of duties requires that critical tasks be split among multiple individuals to prevent fraud and error.

Question 3

Which type of malware hides its presence by modifying the operating system kernel to intercept and falsify system calls?

Accepted Answer

Rootkit

Answer

A rootkit subverts OS-level functions to conceal its own processes, files, and network connections from security tools.

Question 4

A security analyst uses a tool that intercepts and displays all traffic between a client and a server on the same subnet. What type of attack does this technique represent?

Accepted Answer

ARP poisoning / MitM

Answer

ARP poisoning allows an attacker to associate their MAC address with a legitimate IP, redirecting traffic through their machine in a Man-in-the-Middle attack.

Question 5

Which access control model assigns permissions based on job functions defined by the organization rather than individual user identities?

Accepted Answer

RBAC

Answer

Role-Based Access Control (RBAC) grants permissions to roles (e.g., nurse, manager) and users inherit access by being assigned to a role.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Certification II 2