SSCP Certification SSCP Certification MCQ 5

Question 1

Which of the following is the BEST example of a preventive security control?

Accepted Answer

Firewall blocking unauthorized connections

Answer

A firewall actively prevents unauthorized connections from occurring, making it a preventive control rather than detective or corrective.

Question 2

What is the MAIN purpose of a penetration test?

Accepted Answer

To simulate a real-world attack to assess the exploitability of vulnerabilities

Answer

A penetration test actively exploits vulnerabilities to demonstrate real-world attack impact, going beyond just identifying weaknesses.

Question 3

Which of the following BEST describes the function of a Security Information and Event Management (SIEM) system?

Accepted Answer

Aggregating and correlating security logs to detect and alert on threats

Answer

A SIEM collects logs from multiple sources, correlates events, and generates alerts to help analysts detect and respond to threats.

Question 4

An employee is terminated and IT is notified two weeks later. Which security principle was MOST violated?

Accepted Answer

Timely account revocation / access provisioning process

Answer

Timely revocation of access upon termination is critical; delayed notification allows a former employee's credentials to remain active and exploitable.

Question 5

Which type of malware disguises itself as legitimate software to trick users into installing it?

Accepted Answer

Trojan horse

Answer

A Trojan horse masquerades as a legitimate or desirable program while secretly performing malicious actions once installed.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Certification MCQ 5