EN简体繁體日本語
ログイン
ホーム / ISC2 / SSCP
ISC2 · SSCP

SSCP 試験練習問題

Systems Security Certified Practitioner

SSCP の PDF 練習問題。資料の言語は 英語です。購入はこの試験のみで、自動更新はありません。

試験概要

SSCP は「Systems Security Certified Practitioner」の認定試験です。試験形式、時間、対応言語は以下をご確認ください。最新の出題範囲や受験条件は公式サイトをご参照ください。

試験コード
SSCP
公式の試験・資格名
Systems Security Certified Practitioner
試験形式
100–125 multiple-choice and advanced items (computerized adaptive testing)
試験時間
120 分
受験可能な言語
英語、日本語、スペイン語

公式試験の対応言語と練習問題ファイルの言語は異なります。試験の版と言語は公式の予約ページでご確認ください。

公式情報： Provider reference 1 · Provider reference 2 · Provider reference 3
情報確認日：2026-10-20

対応言語

  • 英語
  • 簡体字中国語
購入前にお試し

最初の 20 問を無料プレビュー

全 1,074 問

題庫の元の順序で表示します。回答欄を開くと、正解と収録されている解説を確認できます。

問題の言語：英語。問題文・選択肢・正解・解説は元の題庫の言語で表示します。

免責事項：ExamPico の問題はすべてインターネット上の情報を整理したもので、学習参考用として提供しています。

問題 6

Question#6Topic1

Which of the following is needed for System Accountability?

  1. A. Audit mechanisms.
  2. B. Documented design as laid out in the Common Criteria.
  3. C. Authorization.
  4. D. Formal verification of system design.
正解と解説を表示

正解

A

解説

Is a means of being able to track user actions. Through the use of audit logs and other tools the user actions are recorded and can be used at a later date to verify what actions were performed.
Accountability is the ability to identify users and to be able to track user actions.
The following answers are incorrect:
Documented design as laid out in the Common Criteria. Is incorrect because the Common Criteria is an international standard to evaluate trust and would not be a factor in System Accountability.
Authorization. Is incorrect because Authorization is granting access to subjects, just because you have authorization does not hold the subject accountable for their actions.
Formal verification of system design. Is incorrect because all you have done is to verify the system design and have not taken any steps toward system accountability.
References:
OIG CBK Glossary (page 778)

問題 7

Question#7Topic1

What is Kerberos?

  1. A. A three-headed dog from the egyptian mythology.
  2. B. A trusted third-party authentication protocol.
  3. C. A security model.
  4. D. A remote authentication dial in user server.
正解と解説を表示

正解

B

解説

Is correct because that is exactly what Kerberos is.
The following answers are incorrect:
A three-headed dog from Egyptian mythology. Is incorrect because we are dealing with Information Security and not the Egyptian mythology but the Greek
Mythology.
A security model. Is incorrect because Kerberos is an authentication protocol and not just a security model.
A remote authentication dial in user server. Is incorrect because Kerberos is not a remote authentication dial in user server that would be called RADIUS.

問題 8

Question#8Topic1

The three classic ways of authenticating yourself to the computer security software are by something you know, by something you have, and by something:

  1. A. you need.
  2. B. non-trivial
  3. C. you are.
  4. D. you can get.
正解と解説を表示

正解

C

解説

This is more commonly known as biometrics and is one of the most accurate ways to authenticate an individual.
The rest of the answers are incorrect because they not one of the three recognized forms for Authentication.

問題 9

Question#9Topic1

A timely review of system access audit records would be an example of which of the basic security functions?

  1. A. avoidance.
  2. B. deterrence.
  3. C. prevention.
  4. D. detection.
正解と解説を表示

正解

D

解説

By reviewing system logs you can detect events that have occured.
The following answers are incorrect:
avoidance. This is incorrect, avoidance is a distractor. By reviewing system logs you have not avoided anything. deterrence. This is incorrect because system logs are a history of past events. You cannot deter something that has already occurred. prevention. This is incorrect because system logs are a history of past events. You cannot prevent something that has already occurred.

問題 10

Question#10Topic1

A confidential number used as an authentication factor to verify a user's identity is called a:

  1. A. PIN
  2. B. User ID
  3. C. Password
  4. D. Challenge
正解と解説を表示

正解

A

解説

PIN Stands for Personal Identification Number, as the name states it is a combination of numbers.
The following answers are incorrect:
User ID This is incorrect because a Userid is not required to be a number and a Userid is only used to establish identity not verify it.
Password. This is incorrect because a password is not required to be a number, it could be any combination of characters.
Challenge. This is incorrect because a challenge is not defined as a number, it could be anything.

ダウンロードと個人利用

  • この試験の練習問題を、1・3・6・12か月のダウンロード期間で個別に購入できます。
  • お支払い確認後、作成状況がマイライブラリに表示されます。PDF の準備完了時にメールでお知らせします。
  • 期間内は再ダウンロードできます。期限後は新しい期間をご購入ください。
  • PDF は個人学習専用です。転売や公開共有は禁止されています。
  • 期限後も端末に保存済みのファイルを遠隔で削除することはありません。
資格試験の選び方