Question 1

Which of the following rules pertaining to a Business Continuity Plan/Disaster Recovery

Plan is incorrect?

Options :

A : In order to facilitate recovery, a single plan should cover all locations.

B :

There should be requirements to form a committee to decide a course of action. These

decisions should be made ahead of time and incorporated into the plan.

C : In its procedures and tasks, the plan should refer to functions, not specific individuals.

D :

Critical vendors should be contacted ahead of time to validate equipment can be

obtained in a timely manner.

Answer: A

Question 2

One of these statements about the key elements of a good configuration process is NOT true

Options :

A : Accommodate the reuse of proven standards and best practices

B : Ensure that all requirements remain clear, concise, and valid

C : Control modifications to system hardware in order to prevent resource changes

D : Ensure changes, standards, and requirements are communicated promptly and precisely

Answer: C

Question 3

A timely review of system access audit records would be an example of which of the basic

security functions?

Options :

A :

avoidance

B : deterrence

C : prevention

D : detection

Answer: D

Question 4

Which type of encryption is considered to be unbreakable if the stream is truly random and

is as large as the plaintext and never reused in whole or part?

Options :

A :

One Time Pad (OTP)

B : One time Cryptopad (OTC)

C : Cryptanalysis

D :

Pretty Good Privacy (PGP)

Answer: A

Question 5

There are parallels between the trust models in Kerberos and Public Key Infrastructure

(PKI). When we compare them side by side, Kerberos tickets correspond most closely to

which of the following?

Options :

A : public keys

B : private keys

C : public-key certificates

D : private-key certificates

Answer: C

Smartly Prepare Exam with Free Online SSCP Practice Test

Buying Options: