Test your basic knowledge |

SSCP: Systems Security Certified Practitioner

Instructions:
  • Answer 50 questions in 15 minutes.
  • If you are not ready to take this test, you can study here.
  • Match each statement with the correct term.
  • Don't refresh. All questions and answers are randomly picked and ordered every time you load a test.

This is a study tool. The 3 wrong answers for each question are randomly chosen from answers to other questions. So, you might find at times the answers obvious, but you will see it re-enforces your understanding as you take the test each time.
1. This free (for personal use) program is used to encrypt and decrypt emails.






2. They specifically target telephone networks






3. The PAP protocol sends passwords in clear text - while ____________ encrypts passwords. Both protocols are used by PPP (Point to Point Protocol) to transport IP traffic






4. Security incidents fall into a number of categories such as accidental - deliberate - and ____________.






5. A virus is considered to be 'in the ______ ' if it has been reported as replicating and causing harm to computers.






6. Committing computer crimes in such small doses that they almost go unnoticed.






7. Unlike like viruses and worm - __________ are bogus messages that spread via email forwarding.






8. Smart cards are a secure alternative to which weak security mechanism?






9. An attempt to break an encryption algorithm is called _____________.






10. The ability to identify and audit a user and his / her actions is known as ____________.






11. ___________ - generally considered 'need to know' access is given based on permissions granted to the user.






12. A Security Reference Monitor relates to which DoD security standard?






13. Although they are accused of being one in the same - _______________ are two distinctly different groups with different goals pertaining to computers.






14. Which of the following is NOT and encryption algorithm?






15. ______________ relates to the concept of protecting data from unauthorized users.






16. There are 5 classes of IP addresses available - but only 3 classes are in common use today






17. One method that can reduce exposure to malicious code is to ___________________






18. Although it is considered a low tech attack ____________ is still a very effective way of gaining unauthorized access to network systems.






19. ________ is a protocol developed by Visa and MasterCard to protect electronic transactions.






20. There are 6 types of security control practices. ___________ controls are management policies - procedures - and guidelines that usually effect the entire system. These types of controls deal with system auditing and usability.






21. Which organization(s) are responsible for the timely distribution of information security intelligence data?






22. ____________ is a file system that was poorly designed and has numerous security flaws.






23. To help managers find the correct cost balance between risks and countermeasures






24. EDI (Electronic Data Interchange) differs from e- Commerce in that it ___________________.






25. There are 65536 _________






26. The ability to adjust access control to the exact amount of permission necessary is called ______________.






27. ____ members of the staff need to be educated in disaster recovery procedures.






28. Main goals of an information security program






29. _______________ supply AV engines with false information to avoid detection






30. __________ is a tool used by network administrators to capture packets from a network.






31. A formula used in Quantitative risk analysis






32. What security principle is based on the division of job responsibilities - designed to prevent fraud?






33. ______________ is a major component of an overall risk management program.






34. Identifying specific attempts to penetrate systems is the function of the _______________.






35. Remote Access Dial-in User Service






36. Which range defines 'well known ports?'






37. In a Public Key Infrastructure (PKI) - what is the role of a directory server?






38. DES - Data Encryption standard has a 128 bit key and is ________






39. Macintosh computers are _____ at risk for receiving viruses.






40. IKE - Internet Key Exchange is often used in conjunction with what security standard?






41. Layer 4 of the OSI model corresponds to which layer of the DoD model?






42. The act of intercepting the first message in a public key exchange and substituting a bogus key for the original key is an example of which style of attack?






43. ____________ is used in mission critical systems and applications to lock down information based on sensitivity levels (Confidential - Top Secret - etc.






44. A true network security audit does include an audit for _____________






45. Digital Certificates use which protocol?






46. The most secure method for storing backup tapes is?






47. Tiger - TCP Wrappers - TripWire - LogCheck - SATAN






48. A one way hash converts a string of random length into a _______________ encrypted string.






49. ______________ is a Unix security scanning tool developed at Texas A&M university.






50. What type of software can be used to prevent - detect (and possibly correct) malicious activities on a system?






Can you answer 50 questions in 15 minutes?



Let me suggest you:



Major Subjects



Tests & Exams


AP
CLEP
DSST
GRE
SAT
GMAT

Most popular tests