ISC2 SSCP Exam - Topic 8 Question 52 Discussion

Actual exam question for ISC2's SSCP exam

Question #: 52
Topic #: 8

[All SSCP Questions]

What is the primary reason why some sites choose not to implement Trivial File Transfer Protocol (TFTP)?

AIt is too complex to manage user access restrictions under TFTP

BDue to the inherent security risks

CIt does not offer high level encryption like FTP

DIt cannot support the Lightwight Directory Access Protocol (LDAP)

Show Suggested Answer

Suggested Answer: B

Some sites choose not to implement Trivial File Transfer Protocol (TFTP) due to the inherent security risks. TFTP is a UDP-based file transfer program that provides no security. There is no user authentication.

Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 88.

by Ettie at May 10, 2022, 03:07 AM

Limited Time Offer

25%

Off

Get Premium SSCP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Alease

4 months ago

A is a valid point, but I think security is the bigger issue.

upvoted 0 times

...

Lynette

4 months ago

Surprised to see TFTP still in discussion, isn't it pretty outdated?

upvoted 0 times

...

Malcolm

4 months ago

I thought it was just about the lack of encryption, C makes sense too.

upvoted 0 times

...

Malinda

4 months ago

Totally agree, B is definitely the main reason!

upvoted 0 times

...

Aleisha

5 months ago

It's mainly the security risks that hold people back from using TFTP.

upvoted 0 times

...

Tammara

5 months ago

I don't recall LDAP being a major issue with TFTP, so I think options B and C are more relevant here.

upvoted 0 times

...

Brittni

5 months ago

I feel like user access management is a concern too, but it seems like security risks are more commonly cited in discussions.

upvoted 0 times

...

Ryan

5 months ago

I remember practicing a question about TFTP and its lack of encryption. That might be a reason some sites avoid it.

upvoted 0 times

...

Man

5 months ago

I think the main reason is probably related to security risks, but I'm not entirely sure if that's the only factor.

upvoted 0 times

...

Clay

5 months ago

I feel confident I know the right approach for this. Configuring Citrix Gateway in the proper mode and enabling the right clientless access settings should do the trick.

upvoted 0 times

...

Florinda

5 months ago

I'm a bit confused on whether to start with the baseline or target architecture. The question mentions that the target architecture is not very clear, so maybe it's better to start with the baseline and then iterate to the target?

upvoted 0 times

...

Shawna

5 months ago

This looks like a straightforward Excel formatting question. I think the best approach is to use one of the pre-built themes in Excel, as that will give the document a professional and consistent look with minimal effort.

upvoted 0 times

...