Skip to main content
ITPrepCerts
Login
Exams Free Samples About Contact
Login Create an account

SSCP ISC2 Systems Security Certified Practitioner

  • ISC2
  • 8 free sample questions

About this exam

SSCP is the ISC2 exam ISC2 Systems Security Certified Practitioner. Paid practice material for this exam is not available yet, but you can try its free sample questions.

Exam code
SSCP
Vendor
ISC2
Practice questions
Not available yet
Free sample questions
8
Question bank last updated
Not available yet

Try 2 sample questions

Taken from the free sample set for SSCP.

Question 1

In Mandatory Access Control, sensitivity labels attached to object contain what information? 

  1. Option A:
    The item's classification 
  2. Option B:
    The item's classification and category set
  3. Option C:
    The item's category 
  4. Option D:
    The items's need to know
Show answer and explanation

Correct answer: B

A Sensitivity label must contain at least one classification and one category set.
Category set and Compartment set are synonyms, they mean the same thing. The sensitivity label
must contain at least one Classification and at least one Category. It is common in some
environments for a single item to belong to multiple categories. The list of all the categories to which
an itembelongs is called a compartment set or category set. The following answers are incorrect: the item's classification. Is incorrect because you need a category set as well. the item's category. Is incorrect because category set and classification would be both be required. The item's need to know. Is incorrect because there is no such thing. The need to know is indicated by the catergories the object belongs to.

Question 2

Which of the following is needed for System Accountability? 

  1. Option A:
    Audit mechanisms
  2. Option B:
    Documented design as laid out in the Common Criteria
  3. Option C:
    Authorization. 
  4. Option D:
    Formal verification ofsystem design.
Show answer and explanation

Correct answer: A

Is a means of being able to track user actions. Through the use of audit logs and other tools the user actions are recorded and can be used at a later date to verify what actions were performed. Accountability is the ability to identify users and to be able to track user actions. The following answers are incorrect: Documented design as laid out in the Common Criteria. Is incorrect because the Common Criteria is an international standard to evaluate trust and would not be a factor in System Accountability. Authorization. Is incorrect because Authorization is granting access to subjects, just because you have authorization does not hold the subject accountable for their actions. Formal verification of system design. Is incorrect because all you have done is to verify the system design and have not taken any steps toward system accountability.
See all 8 free sample questions