SSCP Exam Questions and Answers | Exam-Dumps (Page: 33)

QUESTION: 163 Topic: 1, Access Control

Which of the following remote access authentication systems is the most robust?

TACACS+
RADIUS
PAP
TACACS

Answer(s): A

Explanation:

TACACS+ is a proprietary Cisco enhancement to TACACS and is more robust than RADIUS. PAP is not a remote access authentication system but a remote node security protocol.

Reference:

KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 3: Telecommunications and Network Security (page 122).

Reveal Solution Next Question

QUESTION: 164 Topic: 1, Access Control

Which of the following is an example of a passive attack?

Denying services to legitimate users
Shoulder surfing
Brute-force password cracking
Smurfing

Answer(s): B

Explanation:

Shoulder surfing is a form of a passive attack involving stealing passwords, personal identification numbers or other confidential information by looking over someone's shoulder. All other forms of attack are active attacks, where a threat makes a modification to the system in an attempt to take advantage of a vulnerability.

Reference:

HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw-Hill/Osborne, 2002, chapter 3: Security Management Practices (page 63).

Reveal Solution Next Question

QUESTION: 165 Topic: 1, Access Control

What does the Clark-Wilson security model focus on?

Confidentiality
Integrity
Accountability
Availability

Answer(s): B

Explanation:

The Clark-Wilson model addresses integrity. It incorporates mechanisms to enforce internal and external consistency, a separation of duty, and a mandatory integrity policy.

Reference:

KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 5: Security Architectures and Models (page 205).

Reveal Solution Next Question

QUESTION: 166 Topic: 1, Access Control

What does the simple security (ss) property mean in the Bell-LaPadula model?

No read up
No write down
No read down
No write up

Answer(s): A

Explanation:

The ss (simple security) property of the Bell-LaPadula access control model states that reading of information by a subject at a lower sensitivity level from an object at a higher sensitivity level is not permitted (no read up).

Reference:

KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 5: Security Architectures and Models (page 202).

Reveal Solution Next Question

QUESTION: 167 Topic: 1, Access Control

What does the (star) property mean in the Bell-LaPadula model?

No write up
No read up
No write down
No read down

Answer(s): C

Explanation:

The (star) property of the Bell-LaPadula access control model states that writing of information by a subject at a higher level of sensitivity to an object at a lower level of sensitivity is not permitted (no write down).

Reference:

KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 5: Security Architectures and Models (page 202).
Also check out: HARRIS, Shon, All-In-One CISSP Certification Exam Guide, McGraw- Hill/Osborne, 2002, Chapter 5: Security Models and Architecture (page 242, 243).

Reveal Solution Next Question

ISC SSCP Exam (page: 33) ISC SSCP System Security Certified Practitioner (SSCP) Updated on: 25-Dec-2025

QUESTION: 163 Topic: 1, Access Control

Explanation:

Reference:

QUESTION: 164 Topic: 1, Access Control

Explanation:

Reference:

QUESTION: 165 Topic: 1, Access Control

Explanation:

Reference:

QUESTION: 166 Topic: 1, Access Control

Explanation:

Reference:

QUESTION: 167 Topic: 1, Access Control

Explanation:

Reference:

ISC SSCP Exam (page: 33)
ISC SSCP System Security Certified Practitioner (SSCP)
Updated on: 25-Dec-2025