SSCP Practice Test

SSCP Practice Test practice questions, page 24 of 43, with answer review and explanations.

Question 116

Which of the following is the LEAST user accepted biometric device?

  1. Fingerprint
  2. Iris scan
  3. Retina scan
  4. Voice verification

Question 117

Which of the following is the WEAKEST authentication mechanism?

  1. Passphrases
  2. Passwords
  3. One-time passwords
  4. Token devices

Question 118

Which of the following statements pertaining to access control is false?

  1. Users should only access data on a need-to-know basis.
  2. If access is not explicitly denied, it should be implicitly allowed.
  3. Access rights should be granted based on the level of trust a company has on a subject.
  4. Roles can be an efficient way to assign rights to a type of user who performs certain tasks.

Question 119

Which of the following is NOT part of the Kerberos authentication protocol?

  1. Symmetric key cryptography
  2. Authentication service (AS)
  3. Principals
  4. Public Key

Question 120

Which access control model enables the OWNER of the resource to specify what subjects can access specific resources based on their identity?

  1. Discretionary Access Control
  2. Mandatory Access Control
  3. Sensitive Access Control
  4. Role-based Access Control