Which of the following is a recommended mitigation against weak cipher suites in TLS?

Increase the key length of the certificate

Configure the server to support only strong, modern cipher suites

Use the same cipher suite for all clients regardless of compatibility

Disable all cipher suites to prevent attacks

An e-commerce company processes credit card payments on its website. The security team is reviewing the web server configuration to ensure compliance with PCI DSS. They notice that the server supports TLS 1.0 and several weak cipher suites. What should they do to protect cardholder data during transmission?

Keep TLS 1.0 enabled for compatibility with older browsers

Rely on the web application firewall to encrypt traffic

Disable TLS 1.0 and weak cipher suites, and enforce TLS 1.2 or higher with strong ciphers

A government agency needs to send a document containing citizens' PII to a partner organization. The document is currently a plain text file. The agency wants to ensure confidentiality and integrity during transmission, and also verify the sender's identity. Which solution should they use?

Use HTTP to upload the file to a web portal

Compress the file with ZIP and email it

Encrypt the file with PGP and send it via email

Systems Security Certified Practitioner

Domain 5Objective 3

5.3 - Understand and Implement Secure Protocols SSCP Practice Questions (Page 4)

Part of the Cryptography domain, which accounts for 9% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~5–7 in this domain), expect 1–2 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

8concepts

9%of the exam

Questions 16–20

16application · medium
A company needs to transfer log files from a web server to a central log server. The logs contain IP addresses and user agent strings, which are considered PII. The transfer must be encrypted. The company currently uses SSH for administrative access. Which method should they use?
Select an answer first
17foundation · easy
Which of the following is a recommended mitigation against weak cipher suites in TLS?
Select an answer first
18application · medium
An e-commerce company processes credit card payments on its website. The security team is reviewing the web server configuration to ensure compliance with PCI DSS. They notice that the server supports TLS 1.0 and several weak cipher suites. What should they do to protect cardholder data during transmission?
Select an answer first
19application · medium
A government agency needs to send a document containing citizens' PII to a partner organization. The document is currently a plain text file. The agency wants to ensure confidentiality and integrity during transmission, and also verify the sender's identity. Which solution should they use?
Select an answer first
20foundation · easy
Which protocol is specifically designed for secure remote command-line access and encrypted file transfer over an SSH connection?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

5.3 - Understand and Implement Secure Protocols SSCP Practice Questions (Page 4)

Questions 16–20

A company needs to transfer log files from a web server to a central log server. The logs contain IP addresses and user agent strings, which are considered PII. The transfer must be encrypted. The company currently uses SSH for administrative access. Which method should they use?

Which of the following is a recommended mitigation against weak cipher suites in TLS?

A government agency needs to send a document containing citizens' PII to a partner organization. The document is currently a plain text file. The agency wants to ensure confidentiality and integrity during transmission, and also verify the sender's identity. Which solution should they use?

Which protocol is specifically designed for secure remote command-line access and encrypted file transfer over an SSH connection?

Keep studying — Cryptography