A DevOps team uses a public container registry to store images. The security team is concerned about the integrity of images. Which measure best ensures that images have not been tampered with?

Scan images for vulnerabilities after deployment

Use a private registry without authentication

Sign images with a private key and verify the signature before deployment

Store images in a public registry with read-only access

An organization plans to deploy a network security virtual appliance (NSVA) from a vendor. The appliance will be placed in a DMZ segment to inspect traffic. Which deployment step is most critical to ensure the appliance remains secure and effective?

Verify the appliance's digital signature and checksum before deployment

Use default credentials initially to ensure connectivity

Place the appliance on the same VLAN as the management network

Disable logging to reduce resource usage

What is the primary goal of threat hunting in a virtual environment?

To automatically patch all virtual machines on a regular schedule.

To ensure that all virtual machines are backed up daily.

To replace the need for intrusion detection systems.

To proactively search for signs of malicious activity that may have evaded existing security controls.

A virtualized environment uses a storage pool with data deduplication. An administrator is concerned about the security of deduplicated data. Which risk is most relevant?

Deduplication can leak information through side channels

Deduplication increases the risk of data corruption

Deduplication requires encryption to work

Deduplication makes data unrecoverable

A security analyst is threat hunting for signs of a VM escape. Which combination of activities is most likely to reveal an escape attempt?

Monitor hypervisor logs for unusual VM-to-host communication and analyze VM memory dumps

Monitor VM CPU usage and network traffic

Review VM snapshots for changes

Systems Security Certified Practitioner

Domain 7Objective 5

7.5 - Operate and Maintain Secure Virtual Environments SSCP Practice Questions (Page 1)

Part of the Systems and Application Security domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

15%of the exam

Questions 1–5

1application · medium
A DevOps team uses a public container registry to store images. The security team is concerned about the integrity of images. Which measure best ensures that images have not been tampered with?
Select an answer first
2application · medium
An organization plans to deploy a network security virtual appliance (NSVA) from a vendor. The appliance will be placed in a DMZ segment to inspect traffic. Which deployment step is most critical to ensure the appliance remains secure and effective?
Select an answer first
3foundation · easy
What is the primary goal of threat hunting in a virtual environment?
Select an answer first
4expert · hard
A virtualized environment uses a storage pool with data deduplication. An administrator is concerned about the security of deduplicated data. Which risk is most relevant?
Select an answer first
5expert · hard
A security analyst is threat hunting for signs of a VM escape. Which combination of activities is most likely to reveal an escape attempt?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.