SSCP Practice Test

SSCP Practice Test practice questions, page 5 of 43, with answer review and explanations.

Question 21

A department manager has read access to the salaries of the employees in his/her department but not to the salaries of employees in other departments. A database security mechanism that enforces this policy would typically be said to provide which of the following?

  1. Content-dependent access control
  2. Context-dependent access control
  3. Least privileges access control
  4. Ownership-based access control

Question 22

Which of the following attacks could capture network user passwords?

  1. Data diddling
  2. Sniffing
  3. IP Spoofing
  4. Smurfing

Question 23

Which of the following would constitute the best example of a password to use for access to a system by a network administrator?

  1. holiday
  2. Christmas12
  3. Jenny
  4. GyN19Za!

Question 24

The number of violations that will be accepted or forgiven before a violation record is produced is called which of the following?

  1. clipping level
  2. acceptance level
  3. forgiveness level
  4. logging level

Question 25

Examples of types of physical access controls include all EXCEPT which of the following?

  1. badges
  2. locks
  3. guards
  4. passwords