SSCP Certification SSCP Network Communications Security 2

Question 1

Which protocol provides mutual authentication and encrypts both control and data channels in FTP-based communications?

Accepted Answer

FTPS with TLS

Answer

SFTP

Answer

SCP

Answer

TFTP

Question 2

A security analyst needs to identify all devices on a network segment without sending active probes. Which technique is most appropriate?

Accepted Answer

Passive traffic sniffing

Answer

ICMP ping sweep

Answer

ARP scanning

Answer

Port scanning

Question 3

What is the primary security function of 802.1X in a wired or wireless network?

Accepted Answer

Port-based network access control

Answer

Traffic encryption

Answer

VLAN segmentation

Answer

QoS enforcement

Question 4

Which IPsec mode encrypts only the payload while leaving the original IP header intact?

Accepted Answer

Transport mode

Answer

Tunnel mode

Answer

AH mode

Answer

GRE mode

Question 5

An organization wants to prevent employees from accessing social media sites. Which control is BEST suited at the network layer?

Accepted Answer

URL filtering proxy

Answer

Host-based firewall

Answer

IDS signature update

Answer

DNS TTL reduction

Question 6

What does the term 'split tunneling' refer to in VPN implementations?

Accepted Answer

Routing some traffic through the VPN and some directly to the internet

Answer

Encrypting traffic with two different algorithms

Answer

Using two separate VPN endpoints

Answer

Splitting the authentication from the encryption phase

Question 7

Which attack exploits the trust relationship between a DNS resolver and an authoritative server by injecting forged responses?

Accepted Answer

DNS cache poisoning

Answer

BGP hijacking

Answer

ARP spoofing

Answer

ICMP redirect attack