SSCP Certification SSCP Certification MCQ 2

Question 1

Which type of access control uses sensitivity labels attached to subjects and objects to enforce policy?

Accepted Answer

Mandatory Access Control (MAC)

Answer

Discretionary Access Control (DAC)

Answer

Role-Based Access Control (RBAC)

Answer

Attribute-Based Access Control (ABAC)

Question 2

A security analyst notices repeated failed login attempts followed by a successful login from an unusual location. This BEST describes which type of attack?

Accepted Answer

Brute force attack

Answer

Replay attack

Answer

Man-in-the-middle attack

Answer

Credential stuffing

Question 3

Which cryptographic concept ensures that a sender cannot deny having sent a message?

Accepted Answer

Non-repudiation

Answer

Confidentiality

Answer

Integrity

Answer

Availability

Question 4

In PKI, what is the role of the Certificate Authority (CA)?

Accepted Answer

To issue and manage digital certificates that bind identities to public keys

Answer

To encrypt data between endpoints

Answer

To store private keys for users

Answer

To perform intrusion detection

Question 5

Which of the following BEST describes a vulnerability assessment?

Accepted Answer

Identifying and prioritizing security weaknesses without exploitation

Answer

Actively exploiting weaknesses to prove impact

Answer

Simulating an attacker's full attack chain

Answer

Reviewing physical security controls only

Question 6

Which protocol provides secure remote command-line access and replaces Telnet?

Accepted Answer

SSH

Answer

FTP

Answer

SFTP

Answer

RDP

Question 7

What does the concept of 'least privilege' require in access control?

Accepted Answer

Users receive only the minimum permissions necessary to perform their job

Answer

Users are given maximum access to improve productivity

Answer

Admins approve all access requests before granting them

Answer

Access is reviewed annually and revoked if unused for 90 days