SSCP Certification SSCP Network Communications Security 5

Question 1

An attacker intercepts communications between two parties and relays altered messages without either party knowing. This is an example of:

Accepted Answer

Man-in-the-middle attack

Answer

A man-in-the-middle attack positions the attacker between two communicating parties to intercept, read, and potentially alter messages.

Question 2

Which TLS feature allows a server to include the CA's OCSP response in the TLS handshake, reducing client lookup latency?

Accepted Answer

OCSP stapling

Answer

OCSP stapling embeds a time-stamped OCSP response in the TLS handshake so clients don't need to query the OCSP responder separately.

Question 3

Which network device operates at Layer 3 and can enforce access control between network segments using ACLs?

Accepted Answer

Router

Answer

Routers operate at Layer 3 and can apply ACLs to permit or deny traffic based on IP source, destination, and protocol between network segments.

Question 4

What is the purpose of a network DMZ (Demilitarized Zone) in a security architecture?

Accepted Answer

To host public-facing services while isolating them from the internal network

Answer

A DMZ hosts internet-facing services like web and mail servers in a zone that is separated from both the internet and the internal corporate network.

Question 5

Which type of DoS attack exploits asymmetry by sending a small request that generates a large response from a third party aimed at the victim?

Accepted Answer

Amplification attack

Answer

Amplification attacks exploit protocols like DNS and NTP where a small spoofed query generates a large response directed at the victim's IP.

SSCP Certification Practice Test