SSCP Exam Questions With Complete Solutions A+ Pass

SSCP Exam Questions With Complete Solutions A+ Pass ISC2 Tenets - Answer- Protect Society, the commonwealth, and the infrastructure. ISC2 Tenets - Answer- Act honorably, honestly, justly, responsibly, and legally. ISC2 Tenets - Answer- Provide diligent and competent service to principals. ISC2 Tenets - Answer- Advance and protect the profession. ISC2 Ethics Canon - Answer- Tell the truth. Be confident. Be respectful. Honor and trust the privilege given to you. OSI Layer from related Protocols - SMTP, HTTP, FTP, POP3, SNMP, DHCP, DNS, IMAP, LDAP - Answer- Layer 7 - Application OSI Layers - Answer- 7. Application 6. Presentation 5. Session 4. Transport 3. Network 2. Data Link 1. Physical OSI Layer from related Protocols - MPEG, ASCII, MIDI, SSL, TLS - Answer- Layer 6 - Presentation OSI Layer from related Protocols - UDP, TCP - Answer- Layer 4 - Transport OSI Layer for related Protocols - 100BaseTX, ISDN - Answer- Layer 1 - Physical OSI Layer which sends bits - Answer- Layer 1 - Physical OSI Layer which send packets - Answer- Layer 3 - Network OSI Layer for related Protocols - IPv4, IPv6, ICMP - Answer- Layer 3 - Network OSI vs TCP/IP - Answer- Number of Total Possible Ports - Answer- 65,536 Registered Port Numbers - Answer- 1024 - 49,151 Email Port Number - Answer- SMTP - 25 POP - 110 IMAP - 143 SMTP over TLS - 465 FTP Port Number - Answer- 20, 21 TCP RDP Port Number - Answer- 3389 NetBIOS Port Number - Answer- 137 - 139 AD Port Number - Answer- 445 MS SQL Port Number - Answer- 1433 Printer Port Number - Answer- 515, 9100 DNS Port Number - Answer- 53 UDP/TCP Kerberos Port Number - Answer- 88 UDP/TCP LDAP Port Number - Answer- 389 TCP/UDP 636 TLS TCP SNMP Port Number - Answer- 161, 162 ICANN Registar for North Amercia - Answer- ARIN EAP protocol variants - Answer- LEAP - Insecure EAP - Broad framework with secure and unsecure variants PEAP - TLS tunneled EAP Crossover Error Rate (CER) - Answer- CHAP Handshake - Answer- Kerberos - Answer- Info Sec Classification Levels - Answer- Millitary ~ TS ~ Secret ~ Confidential ~ Unclassified Business ~ Highly Sensitive ~ Sensitive ~ Internal ~ Public SCIF - Answer- Sensitive Compartmented Information Facility KPI - Answer- Key Performance Indicator KRI - Answer- Key Risk Indicator Fire Extinguisher Class - Data Center - Answer- Class C Fire Extinguisher Class - Common combustibles - Answer- Class A Fire Extinguisher Class - Liquids - Answer- Class B Fire Extinguisher Class - Heavy Metals - Answer- Class D Fire Extinguisher Class - Kitchens - Answer- Class K Preaction Sprinkler System - Answer- 2 Stage - Dry Pipe and heat triggered sprinklers AES Key Facts - Answer- Symmetric Encryption Algorithm Block Cipher: 128-bit Key Length: 128, 192, 256 Blowfish Key Facts - Answer- Insecure Symmetric Encryption Algorithm Block Cipher: 64 bit Key Length: Variable between 32 - 448 bits Twofish - Answer- Symmetric Encryption Algorithm Block Cipher: 128-bit Key Length: 128, 192, 256 SSCP Accountability - Answer- Auditing Mutation Test - Answer- White box testing Changes to specific components of source code NMAP Open Port - Answer- Port Open and Accepting connections NMAP Closed Port - Answer- Port accessible but not accepting connections NMAP Filtered Port - Answer- Port is not accessible NMAP Default Port Scan - Answer- 1000 UDP & TCP Common Ports Vulnerability Scanners - Answer- OpenVAS = Open Source Nessus = Industry Leader Nikto = Web Microsoft STRIDE - Answer- Spoofing Tampering Repudiation Information Denial of Service Elevation of Privs APT - Answer- Advanced Persistent Threat Cryptographic erase - Answer- Purge Disk 7x Data Overwritten CSIRT - Answer- Computer Security Incident Response Team Lead: ISO or IT Manager NIST Adverse Event - Answer- Security Event Electronic Vaulting - Answer- Automated backup moved off-site SLE - Answer- Single Loss Expectancy SLE Formula - Answer- SLE = AV x EF ALE - Answer- Annualized Loss Expectancy ALE Formula - Answer- ALE = SLE x ARO ARO - Answer- Annualized Rate of Occurrence EF - Answer- Exposure Factor Approver of Business Continuity Plan - Answer- CEO BCP - Answer- Business continuity plan. A plan that helps an organization predict and plan for potential outages due to critical/emergency outages. TCP Flag ACK - Answer- Acknowledgement TCP Flag SYN - Answer- Synchronize - Start Connection TCP Flag RST - Answer- Reset - Immediate Stop TCP Flag Fin - Answer- Finish - Graceful Close Connection Ethernet Cable Category - Answer- Cat 3 - 10 Mbps Cat 5 - 10/100 Mbps Cat 5e & 6 - 1 Gbps Cat 6a, 7 & 7a - 10 Gbps Cat 8 - 40 Gbps VPN protocols - Answer- IPSec PPTP L2F L2TP FDDI - Answer- Fiber Distributed Data Interface ~ Token passing architecture using 2 rings Teardrop Attack - Answer- DDoS with fragmented packets Smurf Attack - Answer- DDoS - ICMP Request Non-IP Protocols - Answer- IPX, AppleTalk, and NetBEUI Mandatory Access Control (MAC) - Answer- Most restrictive access control model Implemented by Military Subject get Classification Object get Sensitivity Label (Classification & Category or Category Set also known as Compartments) Bell LePadula Model - Answer- ~ Orange Book ~ Called a multilevel security system - Basis for MAC Orange Book Divisions - Answer- Division D - minimal security Division C - discretionary protection Division B - mandatory protection Division A - verified protection