SSCP Matching — 10 Questions

Question 1

Match each disaster recovery site type to its description.

Accepted Answer

Hot site: A fully equipped and operational facility ready to take over immediately after a disaster.. Disaster recovery site types vary in readiness and equipment. Hot sites are fully operational, warm sites are partially equipped, cold sites provide only infrastructure, and mobile sites are portable units. Common confusions include mixing the definitions of hot and cold sites, or mistaking mobile sites for cold sites.

Answer

Hot site: A basic facility with power and cooling but no equipment, requiring full setup after a disaster.

Answer

Cold site: A portable, self-contained unit that can be transported and quickly deployed.

Question 2

Match each security control to its type (administrative, technical, physical).

Accepted Answer

Firewall: Technical. Firewall, security policy, and biometric lock are correctly matched to technical, administrative, and physical controls respectively. Common confusions include misclassifying firewalls as physical controls or security policies as technical controls.

Answer

Firewall: Physical

Answer

Security Policy: Technical

Question 3

Match each security policy type to its purpose.

Accepted Answer

Acceptable Use Policy: Defines acceptable behaviors and proper use of organizational IT resources.. The correct matches are: Acceptable Use Policy (acceptable use), Data Classification Policy (data categorization), Password Policy (password rules), Incident Response Policy (incident handling). Common confusions: mixing up policy scopes.

Answer

Acceptable Use Policy: Outlines procedures for incident detection and response.

Answer

Data Classification Policy: Defines rules for password complexity and rotation.

Question 4

Match each vulnerability assessment tool to its use.

Accepted Answer

Nmap: Network mapping and port scanning. Correct matches: Nmap for network mapping, Nessus for vulnerability scanning, Wireshark for packet analysis, Metasploit for exploitation testing. Common confusions include swapping Nmap with Nessus or confusing packet analysis with vulnerability scanning.

Answer

Nmap: Vulnerability scanning and identification

Answer

Nessus: Packet capture and analysis

Question 5

Match each authentication factor to its category.

Accepted Answer

Something you know: Password. Authentication factors are categorized into knowledge (something you know), possession (something you have), inherence (something you are), and location (somewhere you are). Common confusions include mixing knowledge with possession or inherence.

Answer

Something you know: Fingerprint

Answer

Something you have: Password

Question 6

Match each incident response phase to its activity.

Accepted Answer

Preparation: Establishing procedures and training the team.. The incident response phases include Preparation, Detection & Analysis, Containment, Eradication & Recovery, and Post-Incident Activity. Common confusions are mixing preparation with containment and detection with recovery.

Answer

Preparation: Containing the incident to prevent further damage.

Answer

Detection and Analysis: Restoring normal operations after the incident.

Question 7

Match each network security device to its function.

Accepted Answer

Firewall: Filters network traffic based on security rules.. Correct matches: Firewall filters traffic, IDS monitors and alerts, IPS monitors and blocks, VPN concentrator handles encryption. Common confusions: swapping firewall and IDS functions.

Answer

Firewall: Monitors traffic for suspicious activity and sends alerts.

Answer

IDS: Filters network traffic based on security rules.

Question 8

Match each cryptography term to its definition.

Accepted Answer

Symmetric Encryption: Uses the same key for encryption and decryption. Correct matches: Symmetric encryption uses one key; asymmetric uses a key pair; hashing produces fixed-size digests; digital signatures ensure non-repudiation. Common confusions include swapping symmetric/asymmetric definitions or treating hashing as encryption.

Answer

Symmetric Encryption: Uses a pair of keys (public and private)

Answer

Hashing: Used to encrypt data for confidentiality

Question 9

Match each security control type to its example.

Accepted Answer

Preventive: Firewall blocking unauthorized access. Common security control categories: Preventive controls stop incidents (e.g., firewall), Detective controls identify incidents (e.g., camera), Corrective controls remediate (e.g., backup restore), Deterrent controls discourage (e.g., warning sign). Distractors mix these roles.

Answer

Preventive: Log monitoring and alerts

Answer

Detective: Patching vulnerabilities

Question 10

Match each access control model to its description.

Accepted Answer

Discretionary Access Control (DAC): Access decisions are based on the identity of the subject and the discretion of the object owner.. The four primary access control models are DAC (owner-determined), MAC (label-based), RBAC (role-based), and ABAC (attribute-based). Common confusions include mixing up DAC and MAC, or RBAC with DAC.

Answer

Discretionary Access Control (DAC): Access is based on security labels and clearances.

Answer

Role-Based Access Control (RBAC): Access decisions are made by the data owner.