SSCP Cheat Sheet

#	Domain	Weight	Questions	Practice
2.0	Access Controls ACL questions usually test top-down rule processing, source and destination matching, protocol or port logic, and where the ACL should be applied.	—	66	Practice →
5.0	Cryptography Cryptography questions test encryption algorithm selection, key exchange, hashing, PKI and when to use symmetric vs asymmetric encryption.	—	51	Practice →

Domain

Weight

Questions

Practice

2.0

Access Controls

ACL questions usually test top-down rule processing, source and destination matching, protocol or port logic, and where the ACL should be applied.

—

Practice →

5.0

Cryptography

Cryptography questions test encryption algorithm selection, key exchange, hashing, PKI and when to use symmetric vs asymmetric encryption.

—

Practice →

Domain Quick Reference

2.0Access Controls

ACL questions usually test top-down rule processing, source and destination matching, protocol or port logic, and where the ACL should be applied.

Key concepts

✓Standard versus extended ACL behaviour.
✓Top-down processing and the implicit deny rule.
✓Source, destination, protocol and port matching.
✓Inbound versus outbound ACL placement on the correct interface.

Watch out for

⚠ACLs are processed from top to bottom; the first match wins.
⚠There is an implicit deny at the end of every ACL.
⚠Standard ACLs match source only; extended ACLs can match protocol, source, destination and ports.
⚠Applying an ACL in the wrong direction makes a correct ACL look broken.

5.0Cryptography

Cryptography questions test encryption algorithm selection, key exchange, hashing, PKI and when to use symmetric vs asymmetric encryption.

Key concepts

✓Symmetric (AES) vs asymmetric (RSA, ECC) algorithm use cases.
✓Hashing algorithms (SHA-256, MD5) and their integrity use cases.
✓Public Key Infrastructure: certificates, CAs, certificate chains.
✓TLS handshake, digital signatures and non-repudiation.

Watch out for

⚠AES is symmetric and fast; RSA is asymmetric and used for key exchange, not bulk encryption.
⚠Hashing is one-way; encryption is two-way.
⚠A certificate proves identity; it does not encrypt data by itself.
⚠SHA-256 is a hashing algorithm, not an encryption algorithm.

Exam Day Reminders

→Read every question stem fully — look for qualifiers like 'MOST likely,' 'BEST,' or 'EXCEPT.'

→Flag uncertain questions and come back — don't waste time on one question.

→Eliminate obviously wrong options first, then choose between remaining ones.

→Trust your first instinct unless you have a specific reason to change.

→For SSCP, scenarios typically have one clearly best answer — look for the option that matches the specific constraints in the question.

#	Domain	Weight	Questions	Practice
2.0	Access Controls ACL questions usually test top-down rule processing, source and destination matching, protocol or port logic, and where the ACL should be applied.	—	66	Practice →
5.0	Cryptography Cryptography questions test encryption algorithm selection, key exchange, hashing, PKI and when to use symmetric vs asymmetric encryption.	—	51	Practice →

Domain

Weight

Questions

Practice

2.0

Access Controls

ACL questions usually test top-down rule processing, source and destination matching, protocol or port logic, and where the ACL should be applied.

—

Practice →

5.0

Cryptography

Cryptography questions test encryption algorithm selection, key exchange, hashing, PKI and when to use symmetric vs asymmetric encryption.

—

Practice →

Domain Quick Reference

2.0Access Controls

ACL questions usually test top-down rule processing, source and destination matching, protocol or port logic, and where the ACL should be applied.

Key concepts

✓Standard versus extended ACL behaviour.
✓Top-down processing and the implicit deny rule.
✓Source, destination, protocol and port matching.
✓Inbound versus outbound ACL placement on the correct interface.

Watch out for

⚠ACLs are processed from top to bottom; the first match wins.
⚠There is an implicit deny at the end of every ACL.
⚠Standard ACLs match source only; extended ACLs can match protocol, source, destination and ports.
⚠Applying an ACL in the wrong direction makes a correct ACL look broken.

5.0Cryptography

Cryptography questions test encryption algorithm selection, key exchange, hashing, PKI and when to use symmetric vs asymmetric encryption.

Key concepts

✓Symmetric (AES) vs asymmetric (RSA, ECC) algorithm use cases.
✓Hashing algorithms (SHA-256, MD5) and their integrity use cases.
✓Public Key Infrastructure: certificates, CAs, certificate chains.
✓TLS handshake, digital signatures and non-repudiation.

Watch out for

⚠AES is symmetric and fast; RSA is asymmetric and used for key exchange, not bulk encryption.
⚠Hashing is one-way; encryption is two-way.
⚠A certificate proves identity; it does not encrypt data by itself.
⚠SHA-256 is a hashing algorithm, not an encryption algorithm.

Exam Day Reminders

→Read every question stem fully — look for qualifiers like 'MOST likely,' 'BEST,' or 'EXCEPT.'

→Flag uncertain questions and come back — don't waste time on one question.

→Eliminate obviously wrong options first, then choose between remaining ones.

→Trust your first instinct unless you have a specific reason to change.

→For SSCP, scenarios typically have one clearly best answer — look for the option that matches the specific constraints in the question.

SSCP Exam Blueprint — At a Glance

Domain Quick Reference

2.0Access Controls

5.0Cryptography

Exam Day Reminders

More SSCP resources

SSCP Cheat Sheet

SSCP Exam Blueprint — At a Glance

Domain Quick Reference

2.0Access Controls

5.0Cryptography

Exam Day Reminders

More SSCP resources