A security team is hardening a web server that supports TLS. They want to prevent protocol downgrade attacks and ensure that clients cannot negotiate weak cipher suites. Which combination of measures should they implement?

Enable TLS 1.3 only and disable HSTS

Enable HSTS and use a longer key

Use a stronger certificate and enable TLS 1.2

Disable older TLS versions and weak cipher suites, and enable HSTS

A security analyst is investigating a potential man-in-the-middle attack on a company's web application. The analyst notices that the server supports TLS 1.1 and allows the use of RC4 cipher suites. What is the most effective mitigation to prevent this type of attack?

Implement HSTS (HTTP Strict Transport Security)

Increase the key length for the TLS session

Disable TLS 1.1 and RC4, and enforce TLS 1.2 or higher with strong cipher suites

Systems Security Certified Practitioner

Domain 5Objective 3

5.3 - Understand and Implement Secure Protocols SSCP Practice Questions (Page 3)

Part of the Cryptography domain, which accounts for 9% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–7 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

8concepts

9%of the exam

Questions 11–15

11application · medium
A company needs to connect its headquarters to a branch office over the internet. The traffic includes database replication and VoIP, which require low latency and minimal overhead. The security team wants to use a VPN protocol that operates at the network layer and can protect all IP traffic without requiring application changes. Which VPN protocol should they choose?
Select an answer first
12expert · medium
A security team is hardening a web server that supports TLS. They want to prevent protocol downgrade attacks and ensure that clients cannot negotiate weak cipher suites. Which combination of measures should they implement?
Select an answer first
13foundation · easy
Which protocol is commonly used to secure web browser-to-server communication by providing encryption and authentication?
Select an answer first
14application · medium
A security analyst is investigating a potential man-in-the-middle attack on a company's web application. The analyst notices that the server supports TLS 1.1 and allows the use of RC4 cipher suites. What is the most effective mitigation to prevent this type of attack?
Select an answer first
15foundation · easy
Which VPN protocol operates at the network layer and is commonly used for site-to-site VPNs?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

5.3 - Understand and Implement Secure Protocols SSCP Practice Questions (Page 3)

Questions 11–15

A security team is hardening a web server that supports TLS. They want to prevent protocol downgrade attacks and ensure that clients cannot negotiate weak cipher suites. Which combination of measures should they implement?

Which protocol is commonly used to secure web browser-to-server communication by providing encryption and authentication?

A security analyst is investigating a potential man-in-the-middle attack on a company's web application. The analyst notices that the server supports TLS 1.1 and allows the use of RC4 cipher suites. What is the most effective mitigation to prevent this type of attack?

Which VPN protocol operates at the network layer and is commonly used for site-to-site VPNs?

Keep studying — Cryptography