ISC SSCP Practice Questions

The latest changes and updates from the administration for this exam.

verified

Latest Update: Jun 15 2026

All questions are working fine.

All Questions (300)bookmarkBookmarked (0)

All300Show all accessible questions in this exam.Missed300Questions you haven't attempted yet.Incorrect0Questions you answered incorrectly on your last attempt.

Question 21

You are comparing different types of malware. Of the following choices, which one is true?

Trojan horses can replicate without user interaction, but viruses cannot replicate without user interaction.

Worms can replicate without user interaction, but viruses cannot replicate without user interaction.

Viruses can replicate without user interaction, but worms cannot replicate without user interaction.

Viruses can replicate without user interaction, but Trojan horses cannot replicate without user interaction.

Question 22

Which of the following methods could you use to segment networks within your organization? (Select TWO.)

Select all that apply

Separate the data and control planes.

Create a quarantine network.

Implement a VLAN.

Implement a VPN.

Question 23

Administrators within an organization are configuring a wireless network. Management within the organization wants to ensure the administrators configure wireless security using WPA2 Enterprise mode. What is required to support this choice?

TKIP support

AES support

Preshared keys

An 802.1X authentication server

Question 24

A user named Sally logs on with her username of Sally and a password of P@ssw0rd. What provides the identification and what provides the authentication?

It’s not possible to tell from the information given.

Both Sally and P@ssw0rd provide the authentication, and identification occurs when Sally is granted access to resources.

Sally is the identification and P@ssw0rd is the authentication.

P@ssw0rd is the identification and Sally is the authentication.

Question 25

You are comparing various security controls in your organization. What type of security control is an IDS?

Preventive

Administrative

Corrective

Detective

Question 26

You are comparing MAC-based architectures. Which of the following choices best describes the goal of the Clark-Wilson model?

Integrity, through the enforcement of separation of duties

Confidentiality, through the enforcement of separation of duties

Integrity, by preventing a conflict of interest

Confidentiality, by preventing a conflict of interest

Question 27

A user creates a secure HTTPS session with a server using a web browser. How is a symmetric key transferred over the Internet when using TLS?

In unencrypted form in a separate transmission

In unencrypted form separated into multiple packets

In encrypted form after being encrypted with a public key

In encrypted form after being encrypted with a private key

Question 28

You are designing a backup strategy for several key servers. You have time to do a full backup on Sunday, but you must minimize the amount of time needed to complete backups during other days of the week. What strategy should you use?

Full/incremental

Full backups daily

Full/differential

Daily copies

Question 29

You are configuring a new file server that will be used in your network. Management wants you to harden this server as effectively as possible. Which of the following steps would you take? (Select THREE.)

Select all that apply

Remove or disable unneeded services and protocols.

Ensure that the operating system is up to date.

Install and update antivirus software.

Disable the local firewall.

Question 30

An organization needs to continue operations at an alternate location if a hurricane threatens its primary location. The organization expects to have several days’ notice of impending hurricanes. When necessary, the organization will move equipment and data to the alternate location. What type of site should the organization use?

A cold site

A warm site

A hot site

A BIA site

Update History

Update History