SSCP Certification SSCP Certification II 5

Question 1

Which type of IDS analyzes network traffic and compares it against known attack signatures to detect threats?

Accepted Answer

Signature-based IDS

Answer

Signature-based IDS matches network traffic or system events against a database of known attack patterns, making it effective against known threats but blind to zero-days.

Question 2

Which risk treatment option involves purchasing cyber liability insurance to offset potential financial losses from a security incident?

Accepted Answer

Risk transference

Answer

Risk transference shifts the financial burden of a risk to a third party, such as an insurance provider, without eliminating the underlying vulnerability.

Question 3

A user authenticates using a smart card combined with a PIN. What type of authentication factor combination does this represent?

Accepted Answer

Something you have + something you know

Answer

A smart card is 'something you have' and a PIN is 'something you know,' making this a two-factor authentication combination across different factor categories.

Question 4

In the context of secure network design, what is the purpose of a demilitarized zone (DMZ)?

Accepted Answer

To segment publicly accessible servers (e.g., web, email) away from the internal trusted network

Answer

A DMZ places externally accessible services in an isolated network segment so that a compromise of those servers does not directly expose the internal network.

Question 5

Which log source would MOST likely contain evidence of a successful brute-force login attack against a Windows server?

Accepted Answer

Security event log (audit log)

Answer

Windows Security event logs record authentication events, including failed and successful logon attempts, making them the primary source for detecting brute-force attacks.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Certification II 5