SSCP Certification SSCP Network Communications Security 4

Question 1

Which protocol provides cryptographic authentication of BGP route announcements to prevent route hijacking?

Accepted Answer

RPKI with ROA

Answer

RPKI (Resource Public Key Infrastructure) with Route Origin Authorizations cryptographically validates that an AS is authorized to announce specific prefixes.

Question 2

What is the security risk introduced by using HTTP TRACE method on a web server?

Accepted Answer

Cross-site tracing (XST) enabling cookie theft

Answer

HTTP TRACE echoes the request back to the client and can be exploited in cross-site tracing attacks to steal HttpOnly cookies via XSS.

Question 3

In a PKI environment, which component is responsible for checking whether a certificate has been revoked before its expiration date?

Accepted Answer

OCSP Responder

Answer

An OCSP (Online Certificate Status Protocol) responder provides real-time certificate revocation status without requiring a full CRL download.

Question 4

Which network scanning technique sends a SYN packet and completes the handshake only if the port is open, making it easier to detect in logs?

Accepted Answer

Connect scan (full TCP)

Answer

A full TCP connect scan completes the three-way handshake, which is logged by the target OS and therefore more detectable than a SYN scan.

Question 5

A network defender wants to detect lateral movement by attackers who have already breached the perimeter. Which approach is MOST effective?

Accepted Answer

East-west traffic monitoring with micro-segmentation

Answer

Monitoring east-west (internal) traffic and enforcing micro-segmentation detects and limits lateral movement within the network.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Network Communications Security 4