A system administrator needs to encrypt a large database backup file before storing it in the cloud. The backup is 500 GB. Which encryption approach is most efficient for this task?

Use asymmetric encryption with RSA-2048 to encrypt the entire file.

Use a digital signature to encrypt the file.

Use a hash function like SHA-256 to encrypt the file.

Use symmetric encryption with AES-256.

A security team is investigating a suspected man-in-the-middle attack on their web application. Users are seeing valid HTTPS connections, but the certificate is not issued by the expected CA. Which control would best prevent this attack?

Implement certificate pinning in the client application.

Use a longer RSA key on the server.

Use a symmetric key for all web traffic.

A security engineer is designing a protocol for a financial transaction system. The system must ensure that messages are not tampered with and that they originate from a legitimate server. The engineer is considering using HMAC vs. digital signatures. Which consideration is most important when choosing HMAC?

HMAC requires a pre-shared secret key, which must be securely distributed to all parties.

HMAC is slower than digital signatures because it uses asymmetric cryptography.

HMAC provides non-repudiation because the sender cannot deny sending the message.

HMAC can be used without any key management.

Systems Security Certified Practitioner

Domain 5Objective 2

5.2 - Apply Cryptography Concepts SSCP Practice Questions (Page 4)

Part of the Cryptography domain, which accounts for 9% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–7 in this domain), expect 1–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

11concepts

9%of the exam

Questions 16–20

16application · medium
A system administrator needs to encrypt a large database backup file before storing it in the cloud. The backup is 500 GB. Which encryption approach is most efficient for this task?
Select an answer first
17expert · hard
A security team is investigating a suspected man-in-the-middle attack on their web application. Users are seeing valid HTTPS connections, but the certificate is not issued by the expected CA. Which control would best prevent this attack?
Select an answer first
18application · medium
A company wants to set up secure email communication with a partner. They need to ensure that only the partner can read the emails and that the partner can verify the emails came from the company. Which key pair should the company use to encrypt the email?
Select an answer first
19expert · hard
A security engineer is designing a protocol for a financial transaction system. The system must ensure that messages are not tampered with and that they originate from a legitimate server. The engineer is considering using HMAC vs. digital signatures. Which consideration is most important when choosing HMAC?
Select an answer first
20foundation · easy
Which cryptographic attack involves an attacker intercepting and potentially altering communications between two parties?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

5.2 - Apply Cryptography Concepts SSCP Practice Questions (Page 4)

Questions 16–20

A system administrator needs to encrypt a large database backup file before storing it in the cloud. The backup is 500 GB. Which encryption approach is most efficient for this task?

A security team is investigating a suspected man-in-the-middle attack on their web application. Users are seeing valid HTTPS connections, but the certificate is not issued by the expected CA. Which control would best prevent this attack?

A company wants to set up secure email communication with a partner. They need to ensure that only the partner can read the emails and that the partner can verify the emails came from the company. Which key pair should the company use to encrypt the email?

Which cryptographic attack involves an attacker intercepting and potentially altering communications between two parties?

Keep studying — Cryptography