SSCP Exam Questions and Answers | Exam-Dumps (Page: 18)

QUESTION: 88 Topic: 1, Access Control

What is called the percentage at which the False Rejection Rate equals the False Acceptance Rate?

False Rejection Rate (FRR) or Type I Error
False Acceptance Rate (FAR) or Type II Error
Crossover Error Rate (CER)
Failure to enroll rate (FTE or FER)

Answer(s): C

Explanation:

The percentage at which the False Rejection Rate equals the False Acceptance Rate is called the Crossover Error Rate (CER). Another name for the CER is the Equal Error Rate (EER), any of the two terms could be used.
Equal error rate or crossover error rate (EER or CER)
It is the rate at which both accept and reject errors are equal. The EER is a quick way to compare the accuracy of devices with different ROC curves. In general, the device with the lowest EER is most accurate.
The other choices were all wrong answers:
The following are used as performance metrics for biometric systems:
false accept rate or false match rate (FAR or FMR): the probability that the system incorrectly matches the input pattern to a non-matching template in the database. It measures the percent of invalid inputs which are incorrectly accepted. This is when an impostor would be accepted by the system.
False reject rate or false non-match rate (FRR or FNMR): the probability that the system fails to detect a match between the input pattern and a matching template in the database. It measures the percent of valid inputs which are incorrectly rejected. This is when a valid company employee would be rejected by the system.
Failure to enroll rate (FTE or FER): the rate at which attempts to create a template from an input is unsuccessful. This is most commonly caused by low quality inputs.

Reference:

KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 38.
and
https://en.wikipedia.org/wiki/Biometrics

Reveal Solution Next Question

QUESTION: 89 Topic: 1, Access Control

Considerations of privacy, invasiveness, and psychological and physical comfort when using the system are important elements for which of the following?

Accountability of biometrics systems
Acceptability of biometrics systems
Availability of biometrics systems
Adaptability of biometrics systems

Answer(s): B

Explanation:

Acceptability refers to considerations of privacy, invasiveness, and psychological and physical comfort when using the system.

Reference:

KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 39.

Reveal Solution Next Question

QUESTION: 90 Topic: 1, Access Control

Which of the following biometric characteristics cannot be used to uniquely authenticate an individual's identity?

Retina scans
Iris scans
Palm scans
Skin scans

Answer(s): D

Explanation:

The following are typical biometric characteristics that are used to uniquely
authenticate an individual's identity:
Fingerprints
Retina scans
Iris scans
Facial scans
Palm scans
Hand geometry
Voice
Handwritten signature dynamics

Reference:

KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 39. And: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter 4: Access Control (pages 127-131).

Reveal Solution Next Question

QUESTION: 91 Topic: 1, Access Control

Which of the following offers advantages such as the ability to use stronger passwords, easier password administration, one set of credential, and faster resource access?

Smart cards
Single Sign-On (SSO)
Symmetric Ciphers
Public Key Infrastructure (PKI)

Answer(s): B

Explanation:

The advantages of SSO include having the ability to use stronger passwords, easier administration as far as changing or deleting the passwords, minimize the risks of orphan accounts, and requiring less time to access resources.

Reference:

KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, 2001, John Wiley & Sons, Page 39.

Reveal Solution Next Question

QUESTION: 92 Topic: 1, Access Control

Which of the following describes the major disadvantage of many Single Sign-On (SSO) implementations?

Once an individual obtains access to the system through the initial log-on, they have access to all resources within the environment that the account has access to.
The initial logon process is cumbersome to discourage potential intruders.
Once a user obtains access to the system through the initial log-on, they only need to logon to some applications.
Once a user obtains access to the system through the initial log-on, he has to logout from all other systems

Answer(s): A

Explanation:

Single Sign-On is a distrubuted Access Control methodology where an individual only has to authenticate once and would have access to all primary and secondary network domains. The individual would not be required to re-authenticate when they needed additional resources. The security issue that this creates is if a fraudster is able to compromise those credential they too would have access to all the resources that account has access to.
All the other answers are incorrect as they are distractors.

Reveal Solution Next Question

ISC SSCP Exam (page: 18) ISC SSCP System Security Certified Practitioner (SSCP) Updated on: 25-Dec-2025

QUESTION: 88 Topic: 1, Access Control

Explanation:

Reference:

QUESTION: 89 Topic: 1, Access Control

Explanation:

Reference:

QUESTION: 90 Topic: 1, Access Control

Explanation:

Reference:

QUESTION: 91 Topic: 1, Access Control

Explanation:

Reference:

QUESTION: 92 Topic: 1, Access Control

Explanation:

ISC SSCP Exam (page: 18)
ISC SSCP System Security Certified Practitioner (SSCP)
Updated on: 25-Dec-2025