SSCP Practice Test

SSCP Practice Test practice questions, page 9 of 43, with answer review and explanations.

Question 41

Which of the following is NOT a technique used to perform a penetration test?

  1. traffic padding
  2. scanning and probing
  3. war dialing
  4. sniffing

Question 42

In which of the following model are Subjects and Objects identified and the permissions applied to each subject/object combination are specified. Such a model can be used to quickly summarize what permissions a subject has for various system objects.

  1. Access Control Matrix model
  2. Take-Grant model
  3. Bell-LaPadula model
  4. Biba model

Question 43

In which of the following security models is the subject's clearance compared to the object's classification such that specific rules can be applied to control how the subject-to-object interactions take place?

  1. Bell-LaPadula model
  2. Biba model
  3. Access Matrix model
  4. Take-Grant model

Question 44

Which of the following classes is the first level (lower) defined in the TCSEC (Orange Book) as mandatory protection?

  1. B
  2. A
  3. C
  4. D

Question 45

Which of the following classes is defined in the TCSEC (Orange Book) as discretionary protection?

  1. C
  2. B
  3. A
  4. D