A cloud service provider offers a virtual machine (VM) hosting service. A customer runs a critical application on a single VM. The customer wants to ensure the application remains available if the VM fails, but also wants to minimize cost. Which approach best balances availability and cost?

Use a larger, more expensive VM to reduce the chance of failure.

Keep the application on a single VM and enable automatic restart on failure.

Deploy the application on two VMs in different availability zones behind a load balancer.

Take daily snapshots of the VM and restore them if needed.

A hospital's patient-portal team needs to grant a new third-party billing auditor access to a subset of patient records. The auditor only needs to view billing-related fields (not clinical notes) for patients discharged in the last quarter, and only during business hours. The security team wants to minimize the risk of unauthorized exposure while keeping the auditor productive. Which approach best satisfies these requirements?

Grant the auditor the same access as a billing administrator, since both roles work with financial data.

Provide the auditor with a temporary administrative account that expires after one month.

Export the billing fields to a spreadsheet and email it to the auditor daily.

Create a dedicated auditor role with read-only access to billing fields, scope it to the relevant patient subset, and enable time-based access restrictions.

Systems Security Certified Practitioner

Domain 1Objective 2

1.2 - Understand Security Concepts SSCP Practice Questions (Page 2)

Part of the Security Concepts and Practices domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

16%of the exam

Questions 6–10

6foundation · easy
Which security goal prevents an individual from denying that they performed a specific action, such as signing a document?
Select an answer first
7foundation · easy
Which of the following is a common method used to protect the confidentiality of data at rest?
Select an answer first
8expert · hard
A cloud service provider offers a virtual machine (VM) hosting service. A customer runs a critical application on a single VM. The customer wants to ensure the application remains available if the VM fails, but also wants to minimize cost. Which approach best balances availability and cost?
Select an answer first
9application · medium
A hospital's patient-portal team needs to grant a new third-party billing auditor access to a subset of patient records. The auditor only needs to view billing-related fields (not clinical notes) for patients discharged in the last quarter, and only during business hours. The security team wants to minimize the risk of unauthorized exposure while keeping the auditor productive. Which approach best satisfies these requirements?
Select an answer first
10foundation · easy
A database administrator requires read-only access to a customer database to generate reports. According to the principle of least privilege, what level of access should be granted?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

1.2 - Understand Security Concepts SSCP Practice Questions (Page 2)

Questions 6–10

Which security goal prevents an individual from denying that they performed a specific action, such as signing a document?

Which of the following is a common method used to protect the confidentiality of data at rest?

A cloud service provider offers a virtual machine (VM) hosting service. A customer runs a critical application on a single VM. The customer wants to ensure the application remains available if the VM fails, but also wants to minimize cost. Which approach best balances availability and cost?

A database administrator requires read-only access to a customer database to generate reports. According to the principle of least privilege, what level of access should be granted?

Keep studying — Security Concepts and Practices