almost 2 years ago

一般的ISC認證考試是SSCP專家利用專業經驗研究出來的考試題和答案。而Testpdf正好有這些行業專家為你提供這些考試練習題和答案來幫你順利通過考試。我們的Testpdf提供的考試練習題和答案有100%的準確率。購買了Testpdf的產品你就可以很容易地獲得ISC的認證證書，這樣你在ISC行業中又有了個非常大的提升。

ISC SSCP 考試大綱：

主題	簡介
主題 1	Operate and configure wireless technologies Operate and maintain monitoring systems
主題 2	Understand and support secure protocols Perform security assessment activities
主題 3	Understand network attacks and counter measures Participate in the identity management lifecycle
主題 4	Understand fundamental concepts of cryptography Participate in change management
主題 5	Understand the risk management process Implement and maintain authentication methods Participate in asset management

>> SSCP考試指南 <<

高質量的SSCP考試指南，全面覆蓋SSCP考試知識點

Testpdf的經驗豐富的專家團隊開發出了針對ISC SSCP 認證考試的有效的培訓計畫，很適合參加ISC SSCP 認證考試的考生。Testpdf為你提供的都是高品質的產品，可以讓你參加ISC SSCP 認證考試之前做模擬考試，可以為你參加考試做最好的準備。

最新的 ISC Certification SSCP 免費考試真題 (Q20-Q25):

問題 #20
Examples of types of physical access controls include all EXCEPT which of the following?

• A. passwords
• B. guards
• C. badges
• D. locks

答案：A 解題說明：
Explanation/Reference:
Passwords are considered a Preventive/Technical (logical) control.
The following answers are incorrect:
badges Badges are a physical control used to identify an individual. A badge can include a smart device which can be used for authentication and thus a Technical control, but the actual badge itself is primarily a physical control.
locks Locks are a Preventative Physical control and has no Technical association.
guards Guards are a Preventative Physical control and has no Technical association.
The following reference(s) were/was used to create this question:
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 2: Access control systems (page 35).
問題 #21
In the CIA triad, what does the letter A stand for?

• A. Authentication
• B. Accountability
• C. Availability
• D. Auditability

答案：C 解題說明：
Explanation/Reference:
The CIA triad stands for Confidentiality, Integrity and Availability.
問題 #22
Which of the following biometric characteristics cannot be used to uniquely authenticate an individual's identity?

• A. Skin scans
• B. Palm scans
• C. Iris scans
• D. Retina scans

答案：A 解題說明：
Explanation/Reference:
The following are typical biometric characteristics that are used to uniquely authenticate an individual's identity:
Fingerprints
Retina scans
Iris scans
Facial scans
Palm scans
Hand geometry
Voice
Handwritten signature dynamics
Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 39.
And: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter 4:
Access Control (pages 127-131).
問題 #23
PGP uses which of the following to encrypt data?

• A. A symmetric encryption algorithm
• B. A symmetric key distribution system
• C. An X.509 digital certificate
• D. An asymmetric encryption algorithm

答案：A 解題說明：
Notice that the question specifically asks what PGP uses to encrypt For this, PGP uses an symmetric key algorithm. PGP then uses an asymmetric key algorithm to encrypt the session key and then send it securely to the receiver. It is an hybrid system where both types of ciphers are being used for different purposes.
Whenever a question talks about the bulk of the data to be sent, Symmetric is always best to choice to use because of the inherent speed within Symmetric Ciphers. Asymmetric ciphers are 100 to 1000 times slower than Symmetric Ciphers.
The other answers are not correct because:
"An asymmetric encryption algorithm" is incorrect because PGP uses a symmetric algorithm to encrypt data.
"A symmetric key distribution system" is incorrect because PGP uses an asymmetric algorithm for the distribution of the session keys used for the bulk of the data.
"An X.509 digital certificate" is incorrect because PGP does not use X.509 digital certificates to encrypt the data, it uses a session key to encrypt the data.
References:
Official ISC2 Guide page: 275 All in One Third Edition page: 664 - 665
問題 #24
Overloading or congesting a system's resources so that it is unable to provide required services is referred to as:

• A. Bandwidth displacement
• B. Swamping
• C. ICMP redirect
• D. A passive attack
• E. Denial of Service

答案：E 解題說明：
A denial-of-service attack is aimed at depriving an organization of its resources. They are typically intentional attacks targeted against a specific system or network.
問題 #25
...... 我們Testpdf全面提供ISC的SSCP考試認證資料，為你提示成功。我們的培訓資料是由專家帶來的最新的研究材料，你總是得到最新的研究材料，保證你的成功會與我們Testpdf同在，我們幫助你，你肯定從我們這裏得到最詳細最準確的考題及答案，我們培訓工具定期更新，不斷變化的考試目標。其實成功並不遠，你順著Testpdf往下走，就一定能走向你專屬的成功之路。 SSCP權威考題: https://www.testpdf.net/SSCP.html