Which type of malicious activity is best described as a long-term, targeted intrusion by a well-funded adversary that aims to steal sensitive data or maintain persistent access over an extended period?

Distributed denial-of-service (DDoS) attack

Advanced persistent threat (APT)

How does behavior analytics, such as machine learning, help detect malicious activity that traditional signature-based tools might miss?

By blocking all network traffic from unknown IP addresses

By comparing files against a database of known malware signatures

By requiring users to change passwords frequently

By identifying deviations from established baseline behavior patterns

A security operations center (SOC) is evaluating a new detection tool. The tool learns the normal behavior of each user (e.g., login times, file access patterns, and data transfer volumes) and then flags deviations from that baseline. Which detection approach is the tool using?

User and Entity Behavior Analytics (UEBA)

Systems Security Certified Practitioner

Domain 7Objective 1

7.1 - Identify and Analyze Malicious Code and Activity SSCP Practice Questions (Page 3)

Part of the Systems and Application Security domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

7concepts

15%of the exam

Questions 11–15

11foundation · easy
Which type of malware is specifically designed to hide its presence and maintain privileged access by intercepting and modifying system calls or operating system functions?
Select an answer first
12foundation · easy
Which type of malicious activity is best described as a long-term, targeted intrusion by a well-funded adversary that aims to steal sensitive data or maintain persistent access over an extended period?
Select an answer first
13foundation · easy
How does behavior analytics, such as machine learning, help detect malicious activity that traditional signature-based tools might miss?
Select an answer first
14application · medium
A security operations center (SOC) is evaluating a new detection tool. The tool learns the normal behavior of each user (e.g., login times, file access patterns, and data transfer volumes) and then flags deviations from that baseline. Which detection approach is the tool using?
Select an answer first
15foundation · easy
Which social engineering method is characterized by targeting senior executives with highly personalized phishing emails to trick them into revealing sensitive information or authorizing fraudulent transfers?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

7.1 - Identify and Analyze Malicious Code and Activity SSCP Practice Questions (Page 3)

Questions 11–15

Which type of malware is specifically designed to hide its presence and maintain privileged access by intercepting and modifying system calls or operating system functions?

Which type of malicious activity is best described as a long-term, targeted intrusion by a well-funded adversary that aims to steal sensitive data or maintain persistent access over an extended period?

How does behavior analytics, such as machine learning, help detect malicious activity that traditional signature-based tools might miss?

A security operations center (SOC) is evaluating a new detection tool. The tool learns the normal behavior of each user (e.g., login times, file access patterns, and data transfer volumes) and then flags deviations from that baseline. Which detection approach is the tool using?

Which social engineering method is characterized by targeting senior executives with highly personalized phishing emails to trick them into revealing sensitive information or authorizing fraudulent transfers?

Keep studying — Systems and Application Security