SSCP Certification SSCP Network Communications Security 3

Question 1

Which type of firewall can track the state of active network connections and make decisions based on connection context?

Accepted Answer

Stateful inspection firewall

Answer

Stateful inspection firewalls maintain a state table of active connections and evaluate packets in the context of established sessions.

Question 2

A network engineer wants to isolate IoT devices from corporate systems on the same physical switch. Which technology achieves this?

Accepted Answer

VLAN segmentation

Answer

VLANs logically segment a physical switch into isolated broadcast domains, preventing direct communication between device groups.

Question 3

What is the main purpose of Network Address Translation (NAT) from a security perspective?

Accepted Answer

Hiding internal IP addresses from external networks

Answer

NAT obscures internal network addressing by presenting a single public IP, making it harder to directly target internal hosts.

Question 4

Which Wi-Fi attack captures the four-way handshake to perform offline brute-force attacks against the passphrase?

Accepted Answer

WPA2 handshake capture attack

Answer

Capturing the WPA2 four-way handshake allows an attacker to perform offline dictionary or brute-force attacks against the pre-shared key.

Question 5

What distinguishes an IPS from an IDS in network security deployments?

Accepted Answer

IPS can actively block malicious traffic while IDS only detects and alerts

Answer

An IPS is deployed inline and can drop or modify malicious packets in real time, while an IDS passively monitors and generates alerts.

SSCP Certification Practice Test