Free Systems Security Certified Practitioner (SSCP) Exam SSCP Exam Practice Test

A 'Pseudo flaw' is which of the following?

• An apparent loophole deliberately implanted in an operating system program as a trap for intruders.
• An omission when generating Psuedo-code.
• Used for testing for bounds violations in application programming.
• A normally generated page fault causing the system to halt.

Which of the following is unlike the other three choices presented?

• El Gamal
• Teardrop
• Buffer Overflow
• Smurf

Which of the following is an example of a passive attack?

• Denying services to legitimate users
• Shoulder surfing
• Brute-force password cracking
• Smurfing

How is Annualized Loss Expectancy (ALE) derived from a threat?

• ARO x (SLE - EF)
• SLE x ARO
• SLE/EF
• AV x EF

A contingency plan should address:

• Potential risks.
• Residual risks.
• Identified risks.
• All answers are correct.

How should a risk be HANDLED when the cost of the countermeasure OUTWEIGHS the cost of the risk?

• Reject the risk
• Perform another risk analysis
• Accept the risk
• Reduce the risk

At what stage of the applications development process should the security department become involved?

• Prior to the implementation
• Prior to systems testing
• During unit testing
• During requirements development

Which of the following terms can be described as the process to conceal data into another file or media in a practice known as security through obscurity?

• Steganography
• ADS - Alternate Data Streams
• Encryption
• NTFS ADS

What is called a system that is capable of detecting that a fault has occurred and has the ability to correct the fault or operate around it?

• A fail safe system
• A fail soft system
• A fault-tolerant system
• A failover system

Which of the following is an IP address that is private (i.e. reserved for internal networks, and not a valid address to use on the Internet)?

• 172.12.42.5
• 172.140.42.5
• 172.31.42.5
• 172.15.42.5