SSCP Network & Communications Security 2

Question 1

Which protocol provides secure key exchange using asymmetric cryptography before establishing a symmetric session key?

Accepted Answer

Diffie-Hellman

Answer

Diffie-Hellman allows two parties to establish a shared secret over an insecure channel using asymmetric math, then use that secret for symmetric encryption.

Question 2

A network administrator wants to prevent MAC address flooding attacks. Which switch feature is most effective?

Accepted Answer

Port security with MAC limiting

Answer

Port security limits the number of MAC addresses learned on a switch port, preventing attackers from flooding the CAM table and forcing the switch to broadcast all frames.

Question 3

What is the primary purpose of a DMZ (Demilitarized Zone) in network architecture?

Accepted Answer

Host public-facing services while isolating the internal network

Answer

A DMZ places public-facing servers (web, email, DNS) in a segment separated from the internal trusted network, limiting breach impact.

Question 4

Which attack exploits the predictable initial sequence numbers in TCP connections to impersonate a trusted host?

Accepted Answer

TCP session hijacking

Answer

TCP session hijacking relies on predicting or intercepting sequence numbers to inject packets that appear to come from a legitimate, trusted endpoint.

Question 5

WPA3 improved upon WPA2 primarily by replacing PSK authentication with which mechanism?

Accepted Answer

SAE (Simultaneous Authentication of Equals)

Answer

WPA3 uses SAE (Dragonfly handshake) instead of the PSK 4-way handshake, providing forward secrecy and resistance to offline dictionary attacks.

(SSCP) Systems Security Certified Practitioner Exam Practice Test

(SSCP) Systems Security Certified Practitioner Exam Practice Test

SSCP Network & Communications Security 2