SSCP Certification SSCP Network Communications Security 2

Question 1

Which protocol provides mutual authentication and encrypts both control and data channels in FTP-based communications?

Accepted Answer

FTPS with TLS

Answer

FTPS uses TLS to encrypt both the control and data channels and supports mutual certificate-based authentication.

Question 2

A security analyst needs to identify all devices on a network segment without sending active probes. Which technique is most appropriate?

Accepted Answer

Passive traffic sniffing

Answer

Passive traffic sniffing observes existing network traffic without generating probe packets, making it undetectable by IDS.

Question 3

What is the primary security function of 802.1X in a wired or wireless network?

Accepted Answer

Port-based network access control

Answer

802.1X enforces port-based network access control by requiring devices to authenticate before being granted network access.

Question 4

Which IPsec mode encrypts only the payload while leaving the original IP header intact?

Accepted Answer

Transport mode

Answer

IPsec transport mode encrypts only the IP payload, preserving the original IP header for routing.

Question 5

An organization wants to prevent employees from accessing social media sites. Which control is BEST suited at the network layer?

Accepted Answer

URL filtering proxy

Answer

A URL filtering proxy inspects and blocks requests to specific website categories before they leave the network.

SSCP Certification Practice Test