SSCP Practice Test 18 — 15 Questions

Question 1

A Linux administrator needs to configure access controls so that a specific user can run certain commands with root privileges without entering a password. Which configuration file should be modified?

Accepted Answer

/etc/sudoers. The /etc/sudoers file controls sudo permissions. By adding an appropriate entry, the administrator can grant passwordless sudo access to specific commands.

Answer

/etc/shadow

Answer

/etc/passwd

Answer

/etc/security/limits.conf

Question 2

To prevent VM escape attacks in a virtualized environment, which of the following is the most critical security measure?

Accepted Answer

Apply the latest patches to the hypervisor. VM escape exploits vulnerabilities in the hypervisor to break isolation. Regularly patching the hypervisor addresses known vulnerabilities. Disabling guest tools reduces attack surface but may impact functionality. VLAN segmentation and snapshots do not prevent escape.

Answer

Disable unnecessary VM guest tools

Answer

Use VLAN segmentation for VM networks

Answer

Use snapshots for quick recovery

Question 3

A security engineer is hardening a Windows server. Which TWO actions should be taken to reduce the attack surface? (Select TWO.)

Accepted Answer

Disable unnecessary services and accounts. Removing unnecessary accounts and services, and applying patches are core hardening steps. Disabling auto-run prevents malware from executing automatically.

Answer

Increase the number of active user accounts for auditing

Answer

Enable auto-run for removable media to improve user convenience

Answer

Install additional third-party software for monitoring

Question 4

During a security assessment, it is discovered that a Linux server has unnecessary services running, including Telnet and FTP. The server is also missing critical security patches. Which of the following is the MOST effective approach to harden this server according to industry best practices?

Accepted Answer

Disable Telnet and FTP services, and apply all critical security patches.. System hardening involves removing unnecessary services, applying patches, and following benchmarks like CIS or DISA STIGs. Disabling Telnet and FTP and applying all critical patches directly addresses the discovered issues.

Answer

Move the server to a more secure network segment and implement network access controls.

Answer

Enable SELinux and configure a host-based firewall using iptables.

Answer

Install a host-based intrusion detection system (HIDS) to monitor for attacks.

Question 5

In Linux, which command is used to change file permissions to restrict access so that only the owner can read and write, and the group and others have no access?

Accepted Answer

chmod 600 file.txt. The chmod command changes file permissions. The octal mode 600 sets read/write for owner, no permissions for group and others.

Answer

chown 600 file.txt

Answer

umask 077 file.txt

Answer

setfacl -m u::rw file.txt

Question 6

Which of the following OWASP Top 10 vulnerabilities involves an attacker sending malicious data to an interpreter as part of a command or query?

Accepted Answer

Injection. Injection attacks, such as SQL injection, occur when untrusted data is sent to an interpreter. Broken Authentication refers to flaws in auth mechanisms. XSS injects scripts into web pages. Security misconfiguration involves improper setup.

Answer

Security Misconfiguration

Answer

Broken Authentication

Answer

Cross-Site Scripting (XSS)

Question 7

A Linux administrator is hardening a server. Which TWO commands are used to manage file permissions? (Select TWO.)

Accepted Answer

chmod. chmod changes permissions (read/write/execute); chown changes ownership.

Answer

usermod

Answer

passwd

Answer

groupadd

Question 8

A security analyst is reviewing Linux server logs after a suspected breach. Which auditing tool should be used to examine detailed records of system calls and file access events?

Accepted Answer

auditd. auditd is the Linux audit daemon that logs system calls, file access, and security events. PAM manages authentication, iptables is a firewall, and SELinux enforces MAC policies but does not log all system calls.

Answer

SELinux

Answer

PAM

Answer

iptables

Question 9

An organization uses VMware ESXi in a production environment. Which of the following is the most effective mitigation against VM escape attacks?

Accepted Answer

Regularly patching the ESXi hypervisor. VM escape attacks exploit hypervisor vulnerabilities. Keeping the hypervisor patched is the primary defense, as it closes known vulnerabilities that could be used for escape.

Answer

Using VM snapshots for quick recovery

Answer

Implementing network segmentation between VMs

Answer

Disabling unnecessary guest tools within VMs

Question 10

Which of the following is a primary security concern when using VM snapshots in a virtualized environment?

Accepted Answer

Snapshots may contain unpatched vulnerabilities if not regularly updated. VM snapshots capture the state at a point in time. If the snapshot is not updated with patches, reverting to it can reintroduce vulnerabilities that were previously fixed.

Answer

Snapshots can be used to bypass authentication

Answer

Snapshots can be exported and stolen

Answer

Snapshots consume excessive storage space

Question 11

A security engineer is hardening a Linux server. Which TWO actions are recommended to reduce the attack surface? (Select TWO.)

Accepted Answer

Remove unnecessary services and daemons. Removing unnecessary services and disabling unused accounts reduce the number of potential entry points for attackers.

Answer

Install a web server for management

Answer

Set umask to 000

Answer

Enable IPv6 routing

Question 12

A security analyst is hardening a new Windows server. Which configuration would MOST effectively reduce the attack surface by limiting the software that can execute?

Accepted Answer

Configure AppLocker rules. AppLocker is a whitelisting technology that restricts which applications can run, reducing the attack surface.

Answer

Enable Windows Defender Antivirus

Answer

Disable AutoPlay

Answer

Enable User Account Control (UAC)

Question 13

A security auditor discovers that a Linux server has a user who can execute any command as root via sudo without a password. Which file should be reviewed to verify this configuration?

Accepted Answer

/etc/sudoers. The /etc/sudoers file controls sudo privileges. It can be edited with visudo. A NOPASSWD entry would allow passwordless sudo.

Answer

/etc/shadow

Answer

/etc/group

Answer

/etc/passwd

Question 14

A security engineer is designing a key management system for a large enterprise. Which two of the following practices are essential for securing cryptographic keys throughout their lifecycle?

Accepted Answer

Store keys in dedicated hardware security modules (HSMs).. Key storage in hardware security modules (HSMs) and regular key rotation are critical for key security. Storing keys with the data and emailing them violate security best practices. Using a single key for all purposes reduces security.

Answer

Use the same key for encryption, digital signatures, and key exchange.

Answer

Email keys to authorized users for convenience.

Answer

Store keys in the same database as encrypted data.

Question 15

A web application is vulnerable to SQL injection. Which security control would be MOST effective at detecting and blocking such attacks at the network perimeter?

Accepted Answer

Web Application Firewall (WAF). A Web Application Firewall (WAF) inspects HTTP traffic and can block injection attacks.

Answer

Intrusion Detection System (IDS)

Answer

Application whitelisting

Answer

Host-based firewall