A financial institution sends transaction files to a regulatory body. The files must be authentic and unaltered. The institution currently uses a shared symmetric key to encrypt the files. A security auditor recommends switching to digital signatures. What is the primary security advantage of digital signatures over symmetric-key encryption in this scenario?

Digital signatures do not require key management.

Digital signatures encrypt the file, providing both confidentiality and integrity.

Digital signatures are faster to compute than symmetric encryption.

Digital signatures provide non-repudiation, proving the file originated from the institution, while symmetric encryption only provides confidentiality.

A law firm sends settlement agreements to opposing counsel. The firm needs to prove that the agreement was sent by the specific partner and that the document was not altered after signing. The partner uses a laptop that is not centrally managed. Which solution provides the strongest non-repudiation and integrity?

Have the partner sign the document with a digital signature using a private key stored on a hardware token.

Email the document from the partner's corporate email account and request a read receipt.

Fax the document from the partner's office and keep the fax log.

Upload the document to a shared drive and share the link with opposing counsel.

Systems Security Certified Practitioner

Domain 1Objective 2

1.2 - Understand Security Concepts SSCP Practice Questions (Page 6)

Part of the Security Concepts and Practices domain, which accounts for 16% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–13 in this domain), expect 1–2 from this objective — we provide 29 practice questions to prepare you well beyond it. (estimate)

29questions here

6free pages

7concepts

16%of the exam

Questions 26–29

26foundation · easy
Which of the following is a key enabler of accountability in a system?
Select an answer first
27expert · hard
A financial institution sends transaction files to a regulatory body. The files must be authentic and unaltered. The institution currently uses a shared symmetric key to encrypt the files. A security auditor recommends switching to digital signatures. What is the primary security advantage of digital signatures over symmetric-key encryption in this scenario?
Select an answer first
28expert · hard
A law firm sends settlement agreements to opposing counsel. The firm needs to prove that the agreement was sent by the specific partner and that the document was not altered after signing. The partner uses a laptop that is not centrally managed. Which solution provides the strongest non-repudiation and integrity?
Select an answer first
29foundation · easy
Which security goal is primarily concerned with ensuring that data is not disclosed to unauthorized individuals, entities, or processes?
Select an answer first

Finished these 4 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

1.2 - Understand Security Concepts SSCP Practice Questions (Page 6)

Questions 26–29

Which of the following is a key enabler of accountability in a system?

Which security goal is primarily concerned with ensuring that data is not disclosed to unauthorized individuals, entities, or processes?

Keep studying — Security Concepts and Practices