SSCP Certification SSCP Certification MCQ 3 — Questions and Answers
Question 1: Which of the following is the PRIMARY goal of a business continuity plan (BCP)?
- To restore IT systems after a disaster
- To maintain essential business functions during and after a disruption (Correct answer)
- To identify all possible threats to the organization
- To document security policies and procedures
Correct answer: To maintain essential business functions during and after a disruption
A BCP focuses on keeping critical business operations running during disruptions, while a DRP focuses specifically on IT recovery.
Question 2: An IDS that compares network traffic against known attack signatures is classified as which type?
- Anomaly-based IDS
- Signature-based IDS (Correct answer)
- Heuristic-based IDS
- Behavioral IDS
Correct answer: Signature-based IDS
Signature-based IDS matches traffic against a database of known attack patterns, similar to how antivirus software works.
Question 3: What is the PRIMARY purpose of network segmentation?
- To increase network throughput
- To reduce the blast radius of a breach by isolating network zones (Correct answer)
- To simplify network management
- To improve wireless signal coverage
Correct answer: To reduce the blast radius of a breach by isolating network zones
Network segmentation limits lateral movement by isolating network zones so that a compromise in one segment doesn't automatically spread to others.
Question 4: Which of the following BEST describes a rainbow table attack?
- Trying every possible password until the correct one is found
- Using precomputed hash values to reverse password hashes quickly (Correct answer)
- Intercepting credentials during transmission
- Guessing passwords based on personal information about the target
Correct answer: Using precomputed hash values to reverse password hashes quickly
A rainbow table attack uses precomputed tables of hash values to look up plaintext passwords from captured hashes much faster than brute force.
Question 5: In the context of incident response, what does 'containment' mean?
- Identifying the root cause of the incident
- Preventing the incident from spreading further while preserving evidence (Correct answer)
- Restoring systems to normal operation
- Documenting lessons learned after recovery
Correct answer: Preventing the incident from spreading further while preserving evidence
Containment stops the spread of an incident (e.g., isolating infected hosts) while preserving forensic evidence for analysis.
Question 6: Which of the following is an example of two-factor authentication (2FA)?
- A username and a long password
- A password and a one-time code sent to a mobile phone
- A smart card and a PIN
- Both B and C (Correct answer)
Correct answer: Both B and C
Two-factor authentication requires two different factor types; both 'password + OTP' and 'smart card + PIN' combine knowledge/possession factors.
Question 7: What is the MAIN risk mitigated by implementing a data classification policy?
- Unauthorized physical access to data centers
- Applying insufficient or excessive controls to data based on its sensitivity (Correct answer)
- Slow network performance due to unencrypted traffic
- Employees lacking security awareness training
Correct answer: Applying insufficient or excessive controls to data based on its sensitivity
Data classification ensures appropriate security controls are applied based on sensitivity, preventing over- or under-protection of data.
SSCP Certification SSCP Certification MCQ 3
Which of the following is the PRIMARY goal of a business continuity plan (BCP)?