SSCP Systems & Application Security 2

Question 1

Which hardening technique involves disabling or removing unnecessary services, ports, and software from a system?

Accepted Answer

Reducing the attack surface

Answer

Reducing the attack surface by removing unneeded services and components limits the number of potential entry points an attacker can exploit.

Question 2

What is the primary security benefit of containerization technologies like Docker?

Accepted Answer

They isolate applications from each other and the host system

Answer

Containers provide process and filesystem isolation so that a compromised container has limited ability to affect other containers or the host OS.

Question 3

Which type of malware disguises itself as legitimate software to trick users into installing it?

Accepted Answer

Trojan horse

Answer

A Trojan horse masquerades as benign or useful software, but delivers a malicious payload once executed by an unsuspecting user.

Question 4

What is 'input validation' in the context of application security?

Accepted Answer

Ensuring data entered by users meets expected format and type before processing

Answer

Input validation checks that user-supplied data conforms to expected formats, preventing injection attacks and other input-based vulnerabilities.

Question 5

Which security measure involves using multiple independent systems to perform the same function to verify results?

Accepted Answer

Diversity of defense

Answer

Diversity of defense uses different, independent security controls so that a failure or bypass of one does not compromise the entire system.

(SSCP) Security Operations and Administration Practice Test