SSCP Network & Communications Security 5

Question 1

Which protocol operates on UDP port 161 and is used to monitor and manage network devices, but has known security weaknesses in version 1 and 2c?

Accepted Answer

SNMP (Simple Network Management Protocol)

Answer

SNMPv1/v2c uses community strings transmitted in cleartext, making them susceptible to sniffing; SNMPv3 adds authentication and encryption.

Question 2

What is the key difference between IDS (Intrusion Detection System) and IPS (Intrusion Prevention System)?

Accepted Answer

IPS can block traffic inline; IDS only monitors and alerts

Answer

An IPS sits inline in the traffic path and can actively drop malicious packets, while an IDS operates out-of-band and only generates alerts.

Question 3

A company uses MPLS for its WAN. Which security concern is MOST relevant to MPLS environments?

Accepted Answer

Label spoofing enabling traffic misdirection between VPNs

Answer

MPLS uses label-switched paths; if label tables are manipulated or spoofed, traffic can be misdirected between supposedly isolated VPNs.

Question 4

Which protocol is used to securely transfer files and is a subsystem of SSH running over port 22?

Accepted Answer

SFTP (SSH File Transfer Protocol)

Answer

SFTP is a separate protocol that runs as a subsystem over an SSH connection, providing encrypted file transfer on port 22.

Question 5

What does the term 'split tunneling' mean in the context of VPNs?

Accepted Answer

Only traffic destined for corporate resources goes through the VPN tunnel; other traffic uses the local gateway

Answer

Split tunneling allows VPN clients to route corporate-bound traffic through the secure tunnel while sending internet traffic directly through their local ISP.

(SSCP) Systems Security Certified Practitioner Exam Practice Test

(SSCP) Systems Security Certified Practitioner Exam Practice Test

SSCP Network & Communications Security 5