SSCP Practice Test

SSCP Practice Test practice questions, page 40 of 43, with answer review and explanations.

Question 196

Another type of access control is lattice-based access control. In this type of control a lattice model is applied. How is this type of access control concept applied?

  1. The pair of elements is the subject and object, and the subject has an upper bound equal or higher than the upper bound of the object being accessed.
  2. The pair of elements is the subject and object, and the subject has an upper bound lower then the upper bound of the object being accessed.
  3. The pair of elements is the subject and object, and the subject has no special upper or lower bound needed within the lattice.
  4. The pair of elements is the subject and object, and the subject has no access rights in relation to an object.

Question 197

Detective/Technical measures:

  1. include intrusion detection systems and automatically-generated violation reports from audit trail information.
  2. do not include intrusion detection systems and automatically-generated violation reports from audit trail information.
  3. include intrusion detection systems but do not include automatically-generated violation reports from audit trail information.
  4. include intrusion detection systems and customised-generated violation reports from audit trail information.

Question 198

Identification and authentication are the keystones of most access control systems. Identification establishes:

  1. User accountability for the actions on the system.
  2. Top management accountability for the actions on the system.
  3. EDP department accountability for the actions of users on the system.
  4. Authentication for actions on the system

Question 199

Passwords can be required to change monthly, quarterly, or at other intervals:

  1. depending on the criticality of the information needing protection
  2. depending on the criticality of the information needing protection and the password's frequency of use
  3. depending on the password's frequency of use
  4. not depending on the criticality of the information needing protection but depending on the password's frequency of use

Question 200

When submitting a passphrase for authentication, the passphrase is converted into ...

  1. a virtual password by the system
  2. a new passphrase by the system
  3. a new passphrase by the encryption technology
  4. a real password by the system which can be used forever