What is the purpose of validating digital certificates during secure browsing?

To monitor browser activity for suspicious behavior

To ensure the website is legitimate and the connection is encrypted via HTTPS

To block unauthorized software from executing in the browser

To filter malicious network traffic before it reaches the browser

What is the primary purpose of a host-based intrusion prevention system (HIPS)?

To monitor network traffic across the entire enterprise and alert administrators to potential intrusions

To encrypt data stored on the host's hard drive to prevent unauthorized access if the device is lost

To analyze system and network behavior on a single host and actively block malicious activities

To filter incoming and outgoing traffic based on a set of predefined security rules

A law firm issues laptops to attorneys who travel frequently and handle sensitive client data. The firm's compliance policy requires that data at rest be protected if a laptop is lost or stolen. The IT team wants to ensure that the encryption keys are protected by hardware and that the laptops can be remotely wiped if necessary. Which combination of controls should be implemented?

A VPN with mandatory HTTPS for all client communications

BitLocker with a recovery key stored in Active Directory

File-level encryption using EFS

Full disk encryption with keys stored in the TPM

Which statement correctly describes a host-based intrusion detection system (HIDS)?

It encrypts the host's storage to protect data at rest

It analyzes system and network behavior on a single host and blocks malicious activities

It monitors a single host for suspicious activity and generates alerts without actively blocking threats

It filters traffic at the network perimeter based on security rules

Which capability is provided by a Trusted Platform Module (TPM)?

Filtering incoming and outgoing traffic based on security rules

Encrypting the entire hard drive using software-based algorithms

Monitoring system behavior and blocking malicious activities

Storing cryptographic keys in hardware and verifying platform integrity

Systems Security Certified Practitioner

Domain 7Objective 2

7.2 - Implement and Operate Endpoint Device Security SSCP Practice Questions (Page 3)

Part of the Systems and Application Security domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

8concepts

15%of the exam

Questions 11–15

11foundation · easy
What is the purpose of validating digital certificates during secure browsing?
Select an answer first
12foundation · easy
What is the primary purpose of a host-based intrusion prevention system (HIPS)?
Select an answer first
13application · medium
A law firm issues laptops to attorneys who travel frequently and handle sensitive client data. The firm's compliance policy requires that data at rest be protected if a laptop is lost or stolen. The IT team wants to ensure that the encryption keys are protected by hardware and that the laptops can be remotely wiped if necessary. Which combination of controls should be implemented?
Select an answer first
14foundation · easy
Which statement correctly describes a host-based intrusion detection system (HIDS)?
Select an answer first
15foundation · easy
Which capability is provided by a Trusted Platform Module (TPM)?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.