SSCP Certification SSCP Security Operations 3

Question 1

Which type of backup captures only the data that has changed since the LAST FULL backup, regardless of subsequent backups?

Accepted Answer

Differential backup

Answer

A differential backup always references the last full backup, growing larger over time but requiring only two sets for restore.

Question 2

A company's IDS generates a high number of alerts for normal business traffic. This is an example of which problem?

Accepted Answer

False positives

Answer

False positives occur when the IDS incorrectly flags legitimate traffic as malicious, increasing analyst workload and causing alert fatigue.

Question 3

In a SCADA environment, which security concern is MOST unique compared to traditional IT environments?

Accepted Answer

Inability to patch systems without impacting operational availability

Answer

SCADA systems often cannot tolerate downtime for patching because they control physical processes that must run continuously.

Question 4

What does the concept of 'defense in depth' require in security operations?

Accepted Answer

Implementing multiple overlapping layers of security controls

Answer

Defense in depth ensures that if one control fails, additional layers continue to protect assets, reducing the risk of total compromise.

Question 5

An administrator is reviewing firewall rules and finds a rule that permits all outbound traffic. What risk does this rule pose?

Accepted Answer

It can enable data exfiltration and command-and-control communications from malware

Answer

Unrestricted outbound traffic allows malware to communicate with C2 servers and exfiltrate data without triggering egress filtering.

SSCP Certification Practice Test