Question 1

One of these statements about the key elements of a good configuration process is NOT true

Options :

A : Accommodate the reuse of proven standards and best practices

B : Ensure that all requirements remain clear, concise, and valid

C : Control modifications to system hardware in order to prevent resource changes

D : Ensure changes, standards, and requirements are communicated promptly and precisely

Answer: C

Question 2

Which of the following statements pertaining to a security policy is incorrect?

Options :

A :

Its main purpose is to inform the users, administrators and managers of their obligatory

requirements for protecting technology and information assets.

B : It specifies how hardware and software should be used throughout the organization.

C :

It needs to have the acceptance and support of all levels of employees within the

organization in order for it to be appropriate and effective.

D :

It must be flexible to the changing environment.

Answer: B

Question 3

In a Public Key Infrastructure, how are public keys published?

Options :

A : They are sent via e-mail.

B : Through digital certificates

C : They are sent by owners.

D : They are not published.

Answer: B

Question 4

In addition to the Legal Department, with what company function must the collection of physical evidence be coordinated if an employee is suspected?

Options :

A : Human Resources

B : Industrial Security

C : Public Relations

D : External Audit Group

Answer: A

Question 5

Which of the following is defined as an Internet, IPsec, key-establishment protocol, partly

based on OAKLEY, that is intended for putting in place authenticated keying material for

use with ISAKMP and for other security associations?

Options :

A :

Internet Key exchange (IKE)

B : Security Association Authentication Protocol (SAAP)

C : Simple Key-management for Internet Protocols (SKIP)

D : Key Exchange Algorithm (KEA)

Answer: A

Free SSCP Mock Exam – Practice Online Confidently

Buying Options: