SSCP Network Communications Security Questions and Answers

Question 1

A network administrator needs to implement a VPN solution that encrypts the entire IP packet, including the header and payload, providing the highest level of security for site-to-site communication.
Which protocol and mode should be implemented?

Accepted Answer

IPsec in Tunnel mode

Answer

SSL/TLS in any mode

Answer

IPsec in Transport mode

Answer

L2TP with PAP

Question 2

An organization is upgrading its wireless network security. The primary goal is to protect against offline dictionary attacks and provide individualized data encryption, even on open, public-facing guest networks. Which wireless security standard BEST meets these requirements?

Accepted Answer

WPA3

Answer

WPA2-Personal with AES

Answer

WPA with TKIP

Answer

WEP

Question 3

A security analyst is reviewing network traffic logs and notices that a workstation is communicating with a command-and-control server using encrypted DNS queries. At which layer of the OSI model is this malicious activity primarily occurring?

Accepted Answer

Layer 7 (Application)

Answer

Layer 2 (Data Link)

Answer

Layer 3 (Network)

Answer

Layer 4 (Transport)

Question 4

A company wants to implement a Network Access Control (NAC) solution to ensure that only devices with up-to-date antivirus software and the latest OS patches can connect to the internal corporate network. When a device attempts to connect, the NAC system must verify its compliance before granting access. This process is known as:

Accepted Answer

Posture assessment

Answer

Vulnerability scanning

Answer

Intrusion detection

Answer

MAC filtering

Question 5

Which of the following security mechanisms is specifically designed to provide confidentiality, integrity, and authentication for IP packets at the network layer, making it suitable for securing both TCP and UDP traffic without application awareness?

Accepted Answer

IPsec (Internet Protocol Security)

Answer

TLS (Transport Layer Security)

Answer

SSH (Secure Shell)

Answer

S/MIME (Secure/Multipurpose Internet Mail Extensions)

Question 6

A security team is deploying a new firewall. The policy requires that all traffic be denied by default, and only traffic that matches a specific set of rules for approved protocols, source/destination IPs, and ports is permitted. Which firewall rule-based logic does this scenario describe?

Accepted Answer

Implicit deny

Answer

Implicit allow

Answer

Stateless inspection

Answer

Stateful inspection

A network administrator needs to implement a VPN solution that encrypts the entire IP packet, including the header and payload, providing the highest level of security for site-to-site communication.Which protocol and mode should be implemented?

A network administrator needs to implement a VPN solution that encrypts the entire IP packet, including the header and payload, providing the highest level of security for site-to-site communication.
Which protocol and mode should be implemented?