SSCP Certification SSCP Systems and Application Security 4

Question 1

Which virtualization security control ensures that a virtual machine cannot read the memory of another VM running on the same hypervisor?

Accepted Answer

Hypervisor-enforced memory isolation between VM address spaces

Answer

The hypervisor enforces strict memory isolation so each VM's address space is inaccessible to other VMs, preventing cross-VM memory snooping.

Question 2

A developer uses parameterized queries (prepared statements) when building database calls. Which attack class does this MOST directly mitigate?

Accepted Answer

SQL injection

Answer

Parameterized queries separate SQL code from user-supplied data, preventing attackers from injecting SQL syntax that alters the intended query logic.

Question 3

What distinguishes a Type 1 (bare-metal) hypervisor from a Type 2 (hosted) hypervisor in terms of security?

Accepted Answer

Type 1 runs directly on hardware without a host OS, reducing the attack surface

Answer

Type 1 hypervisors run directly on hardware, eliminating the host OS layer and its associated vulnerabilities, resulting in a smaller attack surface.

Question 4

Which endpoint security technology monitors and controls program execution based on a list of approved applications?

Accepted Answer

Application whitelisting

Answer

Application whitelisting allows only pre-approved programs to execute, blocking malware and unauthorized software by default.

Question 5

An organization discovers that an attacker exploited a vulnerability in an unpatched web server plugin that had been public for 60 days. This BEST illustrates the risk of:

Accepted Answer

Failure to apply available patches within an acceptable remediation window

Answer

A 60-day-old patch represents a known, patchable vulnerability; the risk materializes from the organization's failure to apply the available fix within its remediation SLA.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Systems and Application Security 4