Discuss ISC2 SSCP Exam Topic 10 Question 55

Virus scanning and content inspection of SMIME encrypted e-mail without doing any further processing is:

ANot possible

BOnly possible with key recovery scheme of all user keys

CIt is possible only if X509 Version 3 certificates are used

DIt is possible only by 'brute force' decryption

Suggested Answer: A

Content security measures presumes that the content is available in cleartext on the central mail server.

Encrypted emails have to be decrypted before it can be filtered (e.g. to detect viruses), so you need the decryption key on the central 'crypto mail server'.

There are several ways for such key management, e.g. by message or key recovery methods. However, that would certainly require further processing in order to achieve such goal.

Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Melvin 11 months ago

I’m not sure about that, seems too complicated.

Otis 11 months ago

X509 Version 3 is a requirement, right?

Merrilee 12 months ago

Wait, can you really brute force SMIME? Sounds risky!

Melda 12 months ago

I agree, key recovery is a must for scanning.

Britt 12 months ago

Definitely not possible without the keys.

Marylin 1 year ago

Brute force decryption sounds risky and time-consuming. I don't think that's a practical method for scanning emails, so I'm leaning towards option A as well.

Chuck 1 year ago

I vaguely recall something about X509 certificates, but I can't remember if they specifically relate to virus scanning. Option C seems a bit off to me.

Bev 1 year ago

I remember studying that SMIME encryption makes it really hard to scan emails without decrypting them first. So, I think option A might be correct.

Helaine 1 year ago

I feel like I came across a similar question about key recovery schemes in my practice tests. I think option B could be the answer, but I'm not entirely sure.

Angella 1 year ago

Ugh, I'm not totally sure about this one. The settings all sound kind of similar, but I think the key is to focus on the one that specifically mentions "events" and "EPM Server". Let me think this through step-by-step.

Moon 1 year ago

Ah, this is a good one! I remember discussing the importance of aligning total rewards with the company's vision and mission during our class discussions. I'm pretty sure the answer is True.

Devorah 1 year ago

I remember drive0 being used in some examples, but I don't think it applies to USB transfers for this case.

Barbra 1 year ago

If I recall correctly, A and D were mentioned quite often in practice questions, but I can't remember much about C.

ISC2 SSCP Exam - Topic 10 Question 55 Discussion