SSCP Practice Test

SSCP Practice Test practice questions, page 32 of 43, with answer review and explanations.

Question 156

Which of the following statements pertaining to using Kerberos without any extension is false?

  1. A client can be impersonated by password-guessing.
  2. Kerberos is mostly a third-party authentication protocol.
  3. Kerberos uses public key cryptography.
  4. Kerberos provides robust authentication.

Question 157

Which of the following statements pertaining to Kerberos is false?

  1. The Key Distribution Center represents a single point of failure.
  2. Kerberos manages access permissions.
  3. Kerberos uses a database to keep a copy of all users' public keys.
  4. Kerberos uses symmetric key cryptography.

Question 158

Which access control model would a lattice-based access control model be an example of?

  1. Mandatory access control.
  2. Discretionary access control.
  3. Non-discretionary access control.
  4. Rule-based access control.

Question 159

Which of the following is an example of discretionary access control?

  1. Identity-based access control
  2. Task-based access control
  3. Role-based access control
  4. Rule-based access control

Question 160

Which of the following would be used to implement Mandatory Access Control (MAC)?

  1. Clark-Wilson Access Control
  2. Role-based access control
  3. Lattice-based access control
  4. User dictated access control