SSCP Network & Communications Security 4

Question 1

Which network security control operates at OSI Layer 7 and can inspect HTTP application-layer content?

Accepted Answer

Web Application Firewall (WAF)

Answer

A WAF inspects HTTP/HTTPS requests at the application layer to detect and block SQL injection, XSS, and other web-layer attacks.

Question 2

What is the purpose of DNSSEC?

Accepted Answer

Digitally sign DNS records to ensure authenticity and integrity

Answer

DNSSEC uses public key cryptography to digitally sign DNS zone records, allowing resolvers to verify that responses have not been tampered with.

Question 3

A security team detects a large volume of UDP packets sent to broadcast addresses with a spoofed victim source IP. What attack is occurring?

Accepted Answer

Smurf attack

Answer

A Smurf attack spoofs the victim's IP as the source and sends ICMP echo requests to broadcast addresses, causing all hosts to reply to the victim simultaneously.

Question 4

Which NAC (Network Access Control) approach checks endpoint compliance before granting network access?

Accepted Answer

Pre-admission NAC

Answer

Pre-admission NAC evaluates endpoint posture (patch level, AV status, configuration) before allowing the device to access network resources.

Question 5

What security mechanism does 802.11i (WPA2 Enterprise) use that authenticates users against a centralized directory?

Accepted Answer

EAP with RADIUS server

Answer

WPA2 Enterprise uses 802.1X with EAP protocols and a RADIUS server to authenticate individual users against a directory like Active Directory.

(SSCP) Systems Security Certified Practitioner Exam Practice Test

(SSCP) Systems Security Certified Practitioner Exam Practice Test

SSCP Network & Communications Security 4