SSCP Certification SSCP Certification MCQ 4 — Questions and Answers
Question 1: Which fire suppression system is MOST appropriate for a server room to avoid equipment damage?
- Wet-pipe sprinkler system
- Dry-pipe sprinkler system
- Clean agent (gaseous) suppression system (Correct answer)
- Foam-based suppression system
Correct answer: Clean agent (gaseous) suppression system
Clean agent systems (e.g., FM-200, Halon alternatives) suppress fire without leaving residue or water that would damage electronic equipment.
Question 2: What does the term 'data remanence' refer to in information security?
- The backup copy of data stored offsite
- Residual data that remains on storage media after deletion attempts (Correct answer)
- The latency introduced by encrypting data at rest
- Metadata embedded in documents revealing author information
Correct answer: Residual data that remains on storage media after deletion attempts
Data remanence is the residual representation of data on storage media even after deletion, requiring secure sanitization methods to eliminate it.
Question 3: Which of the following security frameworks is PRIMARILY used for federal information systems in the United States?
- ISO/IEC 27001
- NIST SP 800-53 (Correct answer)
- PCI DSS
- COBIT
Correct answer: NIST SP 800-53
NIST SP 800-53 provides security and privacy controls specifically mandated for US federal information systems under FISMA.
Question 4: An attacker sends a specially crafted packet to a web application that causes it to execute database commands. This BEST describes which attack?
- Cross-site scripting (XSS)
- SQL injection (Correct answer)
- Buffer overflow
- Session hijacking
Correct answer: SQL injection
SQL injection inserts malicious SQL commands into input fields to manipulate the backend database directly.
Question 5: Which of the following BEST describes the concept of defense in depth?
- Relying on a single, very strong perimeter firewall
- Using multiple overlapping layers of security controls (Correct answer)
- Encrypting all data at rest and in transit
- Segregating duties among security personnel
Correct answer: Using multiple overlapping layers of security controls
Defense in depth employs multiple, layered security controls so that if one layer fails, others continue to protect the asset.
Question 6: What is the purpose of a VLAN in network security?
- To encrypt traffic between endpoints
- To logically segment a network without requiring additional physical hardware (Correct answer)
- To provide redundant network paths for high availability
- To monitor and log all network traffic for forensic purposes
Correct answer: To logically segment a network without requiring additional physical hardware
VLANs create logical network segments on the same physical infrastructure, isolating broadcast domains and limiting lateral movement.
Question 7: Which of the following describes a 'hot site' in disaster recovery planning?
- A backup location with no pre-installed equipment
- A fully operational duplicate facility with real-time data replication (Correct answer)
- A facility with hardware installed but no data loaded
- A mobile trailer that can be deployed to any location
Correct answer: A fully operational duplicate facility with real-time data replication
A hot site is a fully operational duplicate of the primary site with real-time data synchronization, enabling near-instant failover.
SSCP Certification SSCP Certification MCQ 4
Which fire suppression system is MOST appropriate for a server room to avoid equipment damage?