SSCP Practice Test

1. Which of the following best describes the principle of least privilege?

Users should have maximum access to all systems

Users should have only the minimum access necessary to perform their job

Administrators must grant access to all resources

Access control lists should be publicly visible

2. What is the primary purpose of encryption in data security?

To increase data transfer speed

To convert data into an unreadable form to protect confidentiality

To reduce storage space requirements

To improve system performance

3. Which authentication factor involves something you know?

Fingerprint

Password

Smart card

Facial recognition

4. What does PKI stand for in cryptography?

Public Key Infrastructure

Private Key Interface

Protocol Key Identification

Primary Knowledge Index

5. Which of the following is a symmetric encryption algorithm?

RSA

AES

ECC

DSA

6. A firewall primarily protects against which type of threat?

Insider threats

Unauthorized network access

Social engineering

Malware within trusted networks

7. What is the main goal of access control?

To eliminate all user access

To ensure only authorized users can access resources

To track all user activities

To prevent network connectivity

8. Which of the following is NOT a common type of malware?

Trojan

Worm

Firewall

Ransomware

9. What is a digital signature used for?

To encrypt data

To verify authenticity and integrity of a message

To increase data transfer speed

To compress files

10. Which security model uses role-based access control?

DAC (Discretionary Access Control)

RBAC (Role-Based Access Control)

MAC (Mandatory Access Control)

BAC (Biometric Access Control)

11. What is the purpose of a security patch?

To improve user interface design

To fix software vulnerabilities and security flaws

To increase system speed

To add new features to applications

12. Which protocol is used for secure email communication?

HTTP

SMTP

S/MIME

FTP

13. What is the primary function of an intrusion detection system (IDS)?

To prevent all network attacks

To detect suspicious network activity and potential intrusions

To encrypt network traffic

To manage user passwords

14. Which of the following is a best practice for password management?

Use simple, easy-to-remember passwords

Share passwords with trusted colleagues

Use strong, unique passwords and change them regularly

Write passwords down for safekeeping

15. What does the CIA triad stand for in information security?

Central Intelligence Agency

Confidentiality, Integrity, Availability

Cryptography, Identification, Authentication

Control, Implementation, Audit