A company deploys a virtual firewall appliance from a vendor. The appliance is configured with a management interface. Which security control is most important to protect the management interface from unauthorized access?

Disable password authentication and use only certificates

Restrict management access to specific IP addresses via ACLs

Place the management interface on the same network as the production traffic

Which step is essential when securely deploying a virtual appliance from an untrusted source?

Increasing the appliance's allocated CPU and memory to the maximum supported values.

Disabling all network interfaces on the appliance to prevent any external communication.

Verifying the appliance's digital signature or checksum against the vendor's published value.

Deploying the appliance directly into the production network to test its functionality.

A virtualized environment hosts a critical database VM. The backup strategy currently uses nightly full backups to a local storage pool. The recovery point objective (RPO) is 15 minutes. Which approach best meets the RPO while minimizing storage overhead?

Implement frequent snapshots (e.g., every 15 minutes) and store them on a separate datastore

Increase the frequency of full backups to every hour

Keep only the nightly full backups and accept the RPO

Use continuous replication to a remote site

A company's virtualized environment has a disaster recovery plan that relies on replicating VMs to a secondary site. The RTO is 2 hours and the RPO is 15 minutes. Which replication strategy best meets these objectives?

Nightly full backups to the secondary site

Manual failover with daily snapshots

Periodic replication every 6 hours

Continuous replication with automated failover

A virtualized environment uses a storage pool with data deduplication and encryption. The administrator notices that the deduplication ratio is very low. What is the most likely cause?

The storage pool is configured for thick provisioning

Encryption is applied before deduplication, making data blocks unique

Systems Security Certified Practitioner

Domain 7Objective 5

7.5 - Operate and Maintain Secure Virtual Environments SSCP Practice Questions (Page 5)

Part of the Systems and Application Security domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

15%of the exam

Questions 21–25

21application · medium
A company deploys a virtual firewall appliance from a vendor. The appliance is configured with a management interface. Which security control is most important to protect the management interface from unauthorized access?
Select an answer first
22foundation · easy
Which step is essential when securely deploying a virtual appliance from an untrusted source?
Select an answer first
23application · medium
A virtualized environment hosts a critical database VM. The backup strategy currently uses nightly full backups to a local storage pool. The recovery point objective (RPO) is 15 minutes. Which approach best meets the RPO while minimizing storage overhead?
Select an answer first
24expert · hard
A company's virtualized environment has a disaster recovery plan that relies on replicating VMs to a secondary site. The RTO is 2 hours and the RPO is 15 minutes. Which replication strategy best meets these objectives?
Select an answer first
25expert · hard
A virtualized environment uses a storage pool with data deduplication and encryption. The administrator notices that the deduplication ratio is very low. What is the most likely cause?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.