SSCP Certification SSCP Certification II 4

Question 1

Which hashing algorithm produces a 256-bit digest and is part of the SHA-2 family commonly used for digital signatures and certificate integrity?

Accepted Answer

SHA-256

Answer

SHA-256 is a widely used member of the SHA-2 family, producing a 256-bit hash value considered cryptographically strong for digital signatures.

Question 2

In the context of business continuity planning, what does the Recovery Time Objective (RTO) define?

Accepted Answer

The maximum tolerable downtime before a disruption causes unacceptable business impact

Answer

RTO specifies the maximum duration an organization can tolerate being without a system or service before business consequences become unacceptable.

Question 3

What type of vulnerability assessment actively tests a system by attempting to exploit weaknesses, versus merely identifying them?

Accepted Answer

Penetration testing

Answer

Penetration testing goes beyond vulnerability scanning by actively attempting to exploit identified weaknesses to determine real-world impact.

Question 4

An employee receives an email appearing to be from their CEO, urgently requesting a wire transfer. Which social engineering technique is MOST likely being used?

Accepted Answer

Spear phishing / BEC

Answer

Business Email Compromise (BEC) / spear phishing uses highly targeted, personalized emails impersonating executives to manipulate employees into financial transactions.

Question 5

Which network security device inspects traffic at Layer 7 and can block specific application-level threats such as SQL injection in web requests?

Accepted Answer

Web Application Firewall (WAF)

Answer

A WAF operates at the application layer, inspecting HTTP/HTTPS traffic to detect and block attacks like SQL injection, XSS, and CSRF targeting web applications.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Certification II 4