A company has an intranet portal that is only accessible from within the corporate network. They want to allow remote employees to access the portal securely. Which of the following is the most appropriate solution?

Create a separate extranet for remote employees.

Expose the portal directly to the internet.

Move the portal to a public cloud provider.

Implement a VPN for remote employees to access the internal network.

What is the primary role of an API in establishing trust with a third-party application?

To store data on behalf of the third-party application

To provide a user interface for the third-party application

To replace the need for authentication between systems

To define a set of rules and protocols for secure data exchange

A company uses a mobile app that integrates with a third-party payment gateway. The app sends payment requests to the gateway via an API. Which of the following is the most important security control to implement?

Use IP allowlisting to restrict API access to the app's servers.

Use API keys to authenticate the app to the gateway.

Use a shared secret embedded in the app code.

Use OAuth 2.0 with scopes to limit the app's access to only necessary payment functions.

Systems Security Certified Practitioner

Domain 2Objective 2

2.2 - Understand and Support Internetwork Trust Architectures SSCP Practice Questions (Page 1)

Part of the Access Controls domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 17 practice questions to prepare you well beyond it. (estimate)

17questions here

4free pages

3concepts

15%of the exam

Questions 1–5

1foundation · easy
Which network environment is specifically designed to host services that are accessible from the internet while providing a buffer between the public network and the internal network?
Select an answer first
2application · medium
A company has an intranet portal that is only accessible from within the corporate network. They want to allow remote employees to access the portal securely. Which of the following is the most appropriate solution?
Select an answer first
3foundation · easy
What is the primary role of an API in establishing trust with a third-party application?
Select an answer first
4application · medium
A company uses a mobile app that integrates with a third-party payment gateway. The app sends payment requests to the gateway via an API. Which of the following is the most important security control to implement?
Select an answer first
5foundation · easy
Which trust model eliminates the concept of implicit trust and requires every access request to be explicitly authenticated and authorized?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

2.2 - Understand and Support Internetwork Trust Architectures SSCP Practice Questions (Page 1)

Questions 1–5

Which network environment is specifically designed to host services that are accessible from the internet while providing a buffer between the public network and the internal network?

A company has an intranet portal that is only accessible from within the corporate network. They want to allow remote employees to access the portal securely. Which of the following is the most appropriate solution?

What is the primary role of an API in establishing trust with a third-party application?

A company uses a mobile app that integrates with a third-party payment gateway. The app sends payment requests to the gateway via an API. Which of the following is the most important security control to implement?

Which trust model eliminates the concept of implicit trust and requires every access request to be explicitly authenticated and authorized?

Keep studying — Access Controls