Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25

- Free Preparation Discussions

ISC2 SSCP Exam - Topic 3 Question 117 Discussion

Actual exam question for ISC2's SSCP exam

Question #: 117
Topic #: 3

[All SSCP Questions]

Which of the following best defines add-on security?

APhysical security complementing logical security measures.

BProtection mechanisms implemented as an integral part of an information system.

CLayer security.

DProtection mechanisms implemented after an information system has become operational.

Show Suggested Answer

Suggested Answer: D

The Internet Security Glossary (RFC2828) defines add-on security as 'The retrofitting of protection mechanisms, implemented by hardware or software, after the [automatic data processing] system has become operational.'

Source: SHIREY, Robert W., RFC2828: Internet Security Glossary, may 2000.

by Haley at May 12, 2026, 09:15 AM

Limited Time Offer

25%

Off

Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Celeste

2 hours ago

Definitely D, that's what add-on means!

upvoted 0 times

...

Yan

5 days ago

I’m confused because I thought add-on security was more about physical security, but now I’m not sure if that’s A or if it’s something else entirely.

upvoted 0 times

...

Gary

10 days ago

I feel like we covered something similar in class, and I think it was about integrating security from the start, which might make B the right choice.

upvoted 0 times

...

Sherita

16 days ago

I remember discussing how add-on security is like an extra layer, but I’m not sure if that means it’s C or D.

upvoted 0 times

...

Gearldine

2 months ago

I think add-on security refers to measures that are implemented after the system is already running, so I’m leaning towards D.

upvoted 0 times

...