SSCP Certification SSCP Network Communications Security 2 — Questions and Answers
Question 1: Which protocol provides mutual authentication and encrypts both control and data channels in FTP-based communications?
- SFTP
- FTPS with TLS (Correct answer)
- SCP
- TFTP
Correct answer: FTPS with TLS
FTPS uses TLS to encrypt both the control and data channels and supports mutual certificate-based authentication.
Question 2: A security analyst needs to identify all devices on a network segment without sending active probes. Which technique is most appropriate?
- ICMP ping sweep
- Passive traffic sniffing (Correct answer)
- ARP scanning
- Port scanning
Correct answer: Passive traffic sniffing
Passive traffic sniffing observes existing network traffic without generating probe packets, making it undetectable by IDS.
Question 3: What is the primary security function of 802.1X in a wired or wireless network?
- Traffic encryption
- Port-based network access control (Correct answer)
- VLAN segmentation
- QoS enforcement
Correct answer: Port-based network access control
802.1X enforces port-based network access control by requiring devices to authenticate before being granted network access.
Question 4: Which IPsec mode encrypts only the payload while leaving the original IP header intact?
- Tunnel mode
- Transport mode (Correct answer)
- AH mode
- GRE mode
Correct answer: Transport mode
IPsec transport mode encrypts only the IP payload, preserving the original IP header for routing.
Question 5: An organization wants to prevent employees from accessing social media sites. Which control is BEST suited at the network layer?
- Host-based firewall
- URL filtering proxy (Correct answer)
- IDS signature update
- DNS TTL reduction
Correct answer: URL filtering proxy
A URL filtering proxy inspects and blocks requests to specific website categories before they leave the network.
Question 6: What does the term 'split tunneling' refer to in VPN implementations?
- Encrypting traffic with two different algorithms
- Routing some traffic through the VPN and some directly to the internet (Correct answer)
- Using two separate VPN endpoints
- Splitting the authentication from the encryption phase
Correct answer: Routing some traffic through the VPN and some directly to the internet
Split tunneling allows a VPN client to route corporate traffic through the tunnel while sending internet traffic directly, bypassing the VPN.
Question 7: Which attack exploits the trust relationship between a DNS resolver and an authoritative server by injecting forged responses?
- BGP hijacking
- DNS cache poisoning (Correct answer)
- ARP spoofing
- ICMP redirect attack
Correct answer: DNS cache poisoning
DNS cache poisoning injects malicious DNS records into a resolver's cache, redirecting users to attacker-controlled IP addresses.
SSCP Certification SSCP Network Communications Security 2
Which protocol provides mutual authentication and encrypts both control and data channels in FTP-based communications?