SSCP Access Controls Practice Question
A security analyst is evaluating a biometric system. The system currently has a high number of false rejections. Which metric is most directly related to this issue?
⚠ Common exam trap
SSCP often tests biometric metrics by describing a symptom (too many false rejections) and asking for the metric — candidates who confuse FAR with FRR, or who pick CER/EER because it sounds more sophisticated, choose the wrong answer.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
False Rejection Rate (FRR)
The false rejection rate (FRR) is the metric that directly measures the proportion of legitimate users incorrectly rejected by a biometric system. A high number of false rejections is by definition a high FRR, so FRR is the metric most directly related to the reported issue. The other options describe different accuracy metrics or crossover points.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
False Acceptance Rate (FAR)
Why it's wrong here
FAR measures impostors wrongly accepted, the opposite error to false rejections, so it cannot quantify genuine users being turned away. It is tempting because it is a headline biometric accuracy metric; it would be correct when the system admits unauthorised users too often.
- ✗
Equal Error Rate (EER)
Why it's wrong here
EER equals FAR and FRR at one threshold, describing device accuracy at that crossover, not the current false-rejection volume. It is tempting because it references rejection errors; it would be correct when benchmarking devices by their equal-error operating point rather than diagnosing a live FRR problem.
- ✗
Crossover Error Rate (CER)
Why it's wrong here
CER is the point where FAR and FRR intersect, a tuning comparison value rather than the rate describing rejected genuine users. It is tempting because it summarises overall accuracy; it would be correct when selecting or comparing biometric devices by their balanced operating point.
- ✓
False Rejection Rate (FRR)
Why this is correct
False Rejection Rate measures the proportion of legitimate users incorrectly denied access, which is exactly the high false-rejection symptom described. It is the biometric accuracy metric tied to Type I errors, unlike False Acceptance Rate, which covers impostors wrongly admitted.
About these practice questions
Courseiva writes every SSCP question from scratch — 971 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official ISC2 exam blueprint
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.