SSCP Certification SSCP Systems and Application Security 5

Question 1

Which secure coding practice BEST protects against path traversal attacks in a web application that serves user-requested files?

Accepted Answer

Canonicalizing file paths and validating they remain within an allowed base directory

Answer

Canonicalizing paths resolves '..' sequences before validation, ensuring the resulting absolute path stays within the permitted directory tree.

Question 2

Which container security best practice MOST reduces the risk of privilege escalation if a container is compromised?

Accepted Answer

Running containers as non-root users with read-only root filesystems

Answer

Running containers as non-root with read-only filesystems limits what an attacker can do after compromising a container, constraining privilege escalation paths.

Question 3

An application logs authentication failures but does not alert when 500 failed logins occur against a single account within one minute. This gap represents a failure in which control?

Accepted Answer

Automated detection and alerting on anomalous authentication behavior

Answer

Logging without automated alerting on anomalous thresholds fails to detect brute-force attacks in time for defensive response.

Question 4

Which term describes a vulnerability where an application trusts a serialized object from an untrusted source, potentially leading to remote code execution?

Accepted Answer

Insecure deserialization

Answer

Insecure deserialization occurs when an application reconstructs objects from attacker-controlled data without validation, which can trigger malicious code execution during the deserialization process.

Question 5

A penetration tester uses a tool to automatically submit thousands of username/password combinations harvested from previously breached databases against a login portal. This attack is BEST described as:

Accepted Answer

Credential stuffing using breached credential pairs

Answer

Credential stuffing uses real username/password pairs from prior data breaches, exploiting password reuse across services.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Systems and Application Security 5