SSCP Certification SSCP Certification MCQ 5 — Questions and Answers
Question 1: Which of the following is the BEST example of a preventive security control?
- Security camera footage review
- Firewall blocking unauthorized connections (Correct answer)
- Intrusion detection system alerting on anomalies
- Audit log review after a breach
Correct answer: Firewall blocking unauthorized connections
A firewall actively prevents unauthorized connections from occurring, making it a preventive control rather than detective or corrective.
Question 2: What is the MAIN purpose of a penetration test?
- To identify all vulnerabilities in a system
- To simulate a real-world attack to assess the exploitability of vulnerabilities (Correct answer)
- To audit compliance with security policies
- To document the network topology for security planning
Correct answer: To simulate a real-world attack to assess the exploitability of vulnerabilities
A penetration test actively exploits vulnerabilities to demonstrate real-world attack impact, going beyond just identifying weaknesses.
Question 3: Which of the following BEST describes the function of a Security Information and Event Management (SIEM) system?
- Blocking malicious traffic at the network perimeter
- Aggregating and correlating security logs to detect and alert on threats (Correct answer)
- Encrypting sensitive data stored in databases
- Managing user identities and access rights
Correct answer: Aggregating and correlating security logs to detect and alert on threats
A SIEM collects logs from multiple sources, correlates events, and generates alerts to help analysts detect and respond to threats.
Question 4: An employee is terminated and IT is notified two weeks later. Which security principle was MOST violated?
- Separation of duties
- Need to know
- Timely account revocation / access provisioning process (Correct answer)
- Mandatory vacation policy
Correct answer: Timely account revocation / access provisioning process
Timely revocation of access upon termination is critical; delayed notification allows a former employee's credentials to remain active and exploitable.
Question 5: Which type of malware disguises itself as legitimate software to trick users into installing it?
- Worm
- Ransomware
- Trojan horse (Correct answer)
- Rootkit
Correct answer: Trojan horse
A Trojan horse masquerades as a legitimate or desirable program while secretly performing malicious actions once installed.
Question 6: What is the FIRST step in the risk management process?
- Implementing security controls
- Identifying and assessing assets and threats (Correct answer)
- Developing a remediation plan
- Monitoring and reviewing controls
Correct answer: Identifying and assessing assets and threats
Risk management begins with asset identification and threat/vulnerability assessment before controls can be selected or implemented.
Question 7: Which of the following protocols operates at the network layer and is commonly used for VPN tunneling?
- SSL/TLS
- IPsec (Correct answer)
- SSH
- PPTP
Correct answer: IPsec
IPsec operates at Layer 3 (Network layer) and is widely used to create encrypted VPN tunnels between network endpoints.
SSCP Certification SSCP Certification MCQ 5
Which of the following is the BEST example of a preventive security control?