SSCP Security Architecture & Engineering 2

Question 1

Which cryptographic mode of operation turns a block cipher into a stream cipher by XORing plaintext with an encrypted counter value?

Accepted Answer

CTR (Counter Mode)

Answer

CTR mode generates a keystream by encrypting successive counter values and XORing the result with plaintext, effectively making a block cipher behave as a stream cipher.

Question 2

A security engineer is designing a system where every access request is verified regardless of network location. Which security model best describes this approach?

Accepted Answer

Zero Trust Architecture

Answer

Zero Trust Architecture operates on the principle of 'never trust, always verify,' requiring authentication and authorization for every request regardless of network origin.

Question 3

In the context of hardware security, what is the primary function of a Trusted Platform Module (TPM)?

Accepted Answer

Storing cryptographic keys and performing attestation functions

Answer

A TPM is a dedicated microcontroller that securely stores cryptographic keys, performs platform integrity measurements, and enables remote attestation.

Question 4

Which security principle ensures that a system continues to operate in a secure state even when components fail?

Accepted Answer

Fail-Secure

Answer

Fail-secure (also called fail-safe) means that when a system fails, it defaults to a secure state — for example, a firewall that blocks all traffic upon failure.

Question 5

An attacker exploits a vulnerability in a virtualization platform to escape from a guest VM and access the hypervisor. What type of attack is this?

Accepted Answer

VM Escape

Answer

VM escape is an attack where malicious code running inside a virtual machine breaks out of the VM isolation boundary and gains access to the underlying hypervisor or host.

(SSCP) Systems Security Certified Practitioner Exam Practice Test

(SSCP) Systems Security Certified Practitioner Exam Practice Test

SSCP Security Architecture & Engineering 2