SSCP Certification SSCP Certification MCQ 2 — Questions and Answers
Question 1: Which type of access control uses sensitivity labels attached to subjects and objects to enforce policy?
- Discretionary Access Control (DAC)
- Mandatory Access Control (MAC) (Correct answer)
- Role-Based Access Control (RBAC)
- Attribute-Based Access Control (ABAC)
Correct answer: Mandatory Access Control (MAC)
MAC uses sensitivity labels (e.g., Top Secret, Secret) on both subjects and objects to enforce government-grade access policy.
Question 2: A security analyst notices repeated failed login attempts followed by a successful login from an unusual location. This BEST describes which type of attack?
- Replay attack
- Man-in-the-middle attack
- Credential stuffing
- Brute force attack (Correct answer)
Correct answer: Brute force attack
Repeated failed login attempts followed by eventual success from an unusual location is the hallmark pattern of a brute force attack.
Question 3: Which cryptographic concept ensures that a sender cannot deny having sent a message?
- Confidentiality
- Integrity
- Non-repudiation (Correct answer)
- Availability
Correct answer: Non-repudiation
Non-repudiation, typically achieved via digital signatures, prevents a sender from denying that they sent a message.
Question 4: In PKI, what is the role of the Certificate Authority (CA)?
- To encrypt data between endpoints
- To issue and manage digital certificates that bind identities to public keys (Correct answer)
- To store private keys for users
- To perform intrusion detection
Correct answer: To issue and manage digital certificates that bind identities to public keys
A CA is a trusted entity that issues digital certificates binding a public key to an identity after verifying the requester.
Question 5: Which of the following BEST describes a vulnerability assessment?
- Actively exploiting weaknesses to prove impact
- Identifying and prioritizing security weaknesses without exploitation (Correct answer)
- Simulating an attacker's full attack chain
- Reviewing physical security controls only
Correct answer: Identifying and prioritizing security weaknesses without exploitation
A vulnerability assessment identifies and prioritizes weaknesses without actually exploiting them, unlike a penetration test.
Question 6: Which protocol provides secure remote command-line access and replaces Telnet?
- FTP
- SFTP
- SSH (Correct answer)
- RDP
Correct answer: SSH
SSH (Secure Shell) encrypts remote terminal sessions and is the secure replacement for the plaintext Telnet protocol.
Question 7: What does the concept of 'least privilege' require in access control?
- Users are given maximum access to improve productivity
- Users receive only the minimum permissions necessary to perform their job (Correct answer)
- Admins approve all access requests before granting them
- Access is reviewed annually and revoked if unused for 90 days
Correct answer: Users receive only the minimum permissions necessary to perform their job
Least privilege restricts user access rights to only what is strictly required for their current job function.
SSCP Certification SSCP Certification MCQ 2
Which type of access control uses sensitivity labels attached to subjects and objects to enforce policy?