ISC2 SSCP Exam - Topic 2 Question 73 Discussion

Actual exam question for ISC2's SSCP exam

Question #: 73
Topic #: 2

[All SSCP Questions]

What can best be defined as the detailed examination and testing of the security features of an IT system or product to ensure that they work correctly and effectively and do not show any logical vulnerabilities, such as evaluation criteria?

AAcceptance testing

BEvaluation

CCertification

DAccreditation

Show Suggested Answer

Suggested Answer: A

The Simple Network Management Protocol (SNMP) is a useful tool for remotely managing network devices.

Since it can be used to reconfigure devices, SNMP traffic should be blocked at the organization's firewall.

Using a VPN with encryption or some type of Tunneling software would be highly recommended in this case.

Source: STREBE, Matthew and PERKINS, Charles, Firewalls 24seven, Sybex 2000, Chapter 4: Sockets and Services from a Security Viewpoint.

by Heike at Jul 24, 2023, 11:48 PM

Limited Time Offer

25%

Off

Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Colby

3 months ago

This seems a bit vague, not sure about the answer.

upvoted 0 times

...

Timothy

3 months ago

Wait, are we sure it's not acceptance testing?

upvoted 0 times

...

Sean

4 months ago

Definitely not accreditation, that's for sure.

upvoted 0 times

...

Stevie

4 months ago

I think it's more about certification, right?

upvoted 0 times

...

Margo

4 months ago

Sounds like a classic case of evaluation to me.

upvoted 0 times

...

Eun

4 months ago

Accreditation seems like it could fit, but I feel like it’s more about the approval process rather than the testing itself.

upvoted 0 times

...

Celeste

4 months ago

Certification sounds familiar, especially in the context of security features, but I’m not confident if it matches the detailed examination aspect.

upvoted 0 times

...

Angelyn

5 months ago

I remember studying evaluation criteria, but I can't recall if that directly relates to the definition given in the question.

upvoted 0 times

...

Ettie

5 months ago

I think this might be about acceptance testing, but I'm not entirely sure if that's the right term for a detailed examination.

upvoted 0 times

...

Aleta

5 months ago

Hmm, not sure about the "Integration Style" option - that seems a bit vague. I'd stick to the more concrete details like directionality and any middleware that could be used.

upvoted 0 times

...

Dana

5 months ago

I'm leaning towards option D, the Payment journals. That seems like the most direct way to set up a unique number series for a specific vendor's payments, rather than using a more general journal.

upvoted 0 times

...

Laquita

5 months ago

Hmm, I'm a bit unsure about this. I'll need to double-check my notes on the specific laws around private citizen arrests.

upvoted 0 times

...

Nan

5 months ago

Hmm, this seems like a straightforward true/false question. I'll need to think carefully about the concept of service inventories and how that relates to service composition.

upvoted 0 times

...

Angella

5 months ago

I'm a little confused on this one. Is it the NE Update file or the Internal Connections file that gets exported? I'll have to review my notes to see if I can remember which one is used for provisioning.

upvoted 0 times

...

Brianne

10 months ago

A) Acceptance testing? Really? That's just the final step, not the whole process. I'm going with C) Certification.

upvoted 0 times

Cecily

9 months ago

Certification ensures that IT systems work correctly and effectively without any logical vulnerabilities.

upvoted 0 times

...

Onita

9 months ago

I think Certification is the best option for detailed examination and testing of security features.

upvoted 0 times

...

Allene

9 months ago

Acceptance testing is just the final step, not the whole process.

upvoted 0 times

...

Dean

10 months ago

D) Accreditation seems like the best answer. The question mentions 'evaluation criteria', and accreditation is the process of evaluating and verifying the quality of a system or product.

upvoted 0 times

Arminda

9 months ago

D) Accreditation is the most specific option that aligns with the description provided in the question.

upvoted 0 times

...

Sunshine

10 months ago

B) Evaluation is a broader term that can include different types of assessments.

upvoted 0 times

...

Markus

10 months ago

A) Acceptance testing is more about ensuring that the system meets the requirements set by the stakeholders.

upvoted 0 times

...

Billi

11 months ago

I'm not sure, but I think it could also be C) Certification.

upvoted 0 times

...

Flo

11 months ago

I'm going with C) Certification. The question talks about ensuring the security features work correctly, and that sounds like a certification process to me.

upvoted 0 times

Precious

9 months ago

I think you both make valid points, but I'm sticking with C) Certification as well. It seems to align closely with the description provided.

upvoted 0 times

...

Tasia

9 months ago

I see your point, but I still think C) Certification is the best fit. It's about ensuring the security features are working correctly.

upvoted 0 times

...

Maynard

9 months ago

I agree with you, but I believe it's D) Accreditation. It's about verifying the security features meet certain standards.

upvoted 0 times

...

Joanne

9 months ago

Yeah, Certification is all about making sure everything works correctly and effectively.

upvoted 0 times

...

Marjory

9 months ago

I think you're right, Certification does involve detailed examination and testing of security features.

upvoted 0 times

...

Lillian

10 months ago

I think it's B) Evaluation. It involves examining and testing the security features to ensure they work effectively.

upvoted 0 times

...

Dannie

11 months ago

I agree with Ezekiel, evaluation makes sense for this question.

upvoted 0 times

...

Jacklyn

11 months ago

Haha, acceptance testing? That's like saying my mom's cooking is the best way to evaluate a restaurant's menu. Clearly, C) Certification is the way to go.

upvoted 0 times

...

Ezekiel

11 months ago

I think the answer is B) Evaluation.

upvoted 0 times

...