1.2 - Understand Security Concepts SSCP Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which security goal is concerned with ensuring that data has not been altered or tampered with by unauthorized parties?

   • AAccountability
   • BIntegrity
   • CAvailability
   • DConfidentiality
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which security principle states that users should be granted only the permissions necessary to perform their job functions?

   • ADefense in depth
   • BLeast privilege
   • CSeparation of duties
   • DNeed to know
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An e-commerce company's website experiences a distributed denial-of-service (DDoS) attack that overwhelms its public-facing servers. The company's priority is to keep the website accessible to legitimate customers while minimizing the impact on internal operations. Which strategy best addresses availability?

   • ARequire all users to complete a CAPTCHA before accessing the site.
   • BDisable the website's public DNS records until the attack subsides.
   • CIncrease the capacity of the origin servers to handle the increased traffic.
   • DDeploy a cloud-based DDoS protection service that filters malicious traffic before it reaches the origin servers.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which cryptographic technique is specifically used to provide non-repudiation?

   • ASteganography
   • BSymmetric encryption
   • CDigital signature
   • DHash function
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A law firm stores case files in a cloud document system. A paralegal needs to access only the documents assigned to their current cases, and the firm wants to prevent other staff from viewing those files. The system supports folder-level permissions and per-file encryption keys. Which configuration best protects confidentiality while supporting the paralegal's work?

   • AGrant the paralegal read/write access only to their assigned case folders and encrypt each file with a key accessible only to the assigned team.
   • BEncrypt all files with a single firm-wide key and share it with all staff.
   • CGive the paralegal full access to all case folders and rely on the firm's confidentiality policy.
   • DDisable folder permissions and rely on the document system's search index to limit results.
   Reveal Solution Discussion Select an answer first