SSCP Practice Test

SSCP Practice Test practice questions, page 4 of 43, with answer review and explanations.

Question 16

Controls to keep password sniffing attacks from compromising computer systems include which of the following?

  1. static and recurring passwords.
  2. encryption and recurring passwords.
  3. one-time passwords and encryption.
  4. static and one-time passwords.

Question 17

Kerberos can prevent which one of the following attacks?

  1. tunneling attack.
  2. playback (replay) attack.
  3. destructive attack.
  4. process attack.

Question 18

In discretionary access environments, which of the following entities is authorized to grant information access to other people?

  1. Manager
  2. Group Leader
  3. Security Manager
  4. Data Owner

Question 19

What is the main concern with single sign-on?

  1. Maximum unauthorized access would be possible if a password is disclosed.
  2. The security administrator's workload would increase.
  3. The users' password would be too hard to remember.
  4. User access rights would be increased.

Question 20

Who developed one of the first mathematical models of a multilevel-security computer system?

  1. Diffie and Hellman.
  2. Clark and Wilson.
  3. Bell and LaPadula.
  4. Gasser and Lipner.