Discuss ISC2 SSCP Exam Topic 3 Question 117

Which of the following best defines add-on security?

APhysical security complementing logical security measures.

BProtection mechanisms implemented as an integral part of an information system.

CLayer security.

DProtection mechanisms implemented after an information system has become operational.

Suggested Answer: D

The Internet Security Glossary (RFC2828) defines add-on security as 'The retrofitting of protection mechanisms, implemented by hardware or software, after the [automatic data processing] system has become operational.'

Source: SHIREY, Robert W., RFC2828: Internet Security Glossary, may 2000.

Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

22 comments · newest first

Linette 2 days ago

I disagree, I lean towards A. Physical security is crucial too.

Latosha 7 days ago

I think D is the best choice. It fits the definition of add-on security.

Simona 12 days ago

A is important, but I still think B covers more ground.

Twana 18 days ago

D is definitely add-on security. It’s like a patch after the fact.

Xochitl 23 days ago

C sounds good, but it’s too vague for me.

Devorah 28 days ago

I lean towards B. Integrated security feels more effective.

Ricki 1 month ago

I disagree. A is better. Physical security is crucial too.

Judy 1 month ago

I think D is the right choice. It makes sense to add security after deployment.

Harrison 1 month ago

C is interesting, but I feel like it’s more than just layering.

Scarlet 2 months ago

Wait, is it really just about adding security after? Seems too simple.

Shizue 2 months ago

Totally agree with D, that's how most systems are secured.

Cammy 2 months ago

I think A makes more sense, physical and logical should go hand in hand.

Alisha 2 months ago

D is the right answer, it's all about adding security later.

Ruthann 2 months ago

Wait, so add-on means after? That's surprising!

Dana 2 months ago

Not sure about D, seems a bit off to me.

Reuben 3 months ago

C sounds right, layers are important in security.

Fredric 3 months ago

I think it's more like A, physical security is key.

Celeste 3 months ago

Definitely D, that's what add-on means!

Yan 3 months ago

I’m confused because I thought add-on security was more about physical security, but now I’m not sure if that’s A or if it’s something else entirely.

Gary 3 months ago

I feel like we covered something similar in class, and I think it was about integrating security from the start, which might make B the right choice.

Sherita 4 months ago

I remember discussing how add-on security is like an extra layer, but I’m not sure if that means it’s C or D.

Gearldine 5 months ago

I think add-on security refers to measures that are implemented after the system is already running, so I’m leaning towards D.

ISC2 SSCP Exam - Topic 3 Question 117 Discussion