EN简体繁體日本語
ログイン
ホーム / ISC2 / SSCP
ISC2 · SSCP

SSCP 試験練習問題

Systems Security Certified Practitioner

SSCP の PDF 練習問題。資料の言語は 英語です。購入はこの試験のみで、自動更新はありません。

試験概要

SSCP は「Systems Security Certified Practitioner」の認定試験です。試験形式、時間、対応言語は以下をご確認ください。最新の出題範囲や受験条件は公式サイトをご参照ください。

試験コード
SSCP
公式の試験・資格名
Systems Security Certified Practitioner
試験形式
100–125 multiple-choice and advanced items (computerized adaptive testing)
試験時間
120 分
受験可能な言語
英語、日本語、スペイン語

公式試験の対応言語と練習問題ファイルの言語は異なります。試験の版と言語は公式の予約ページでご確認ください。

公式情報： Provider reference 1 · Provider reference 2 · Provider reference 3
情報確認日：2026-10-20

対応言語

  • 英語
  • 簡体字中国語
購入前にお試し

最初の 20 問を無料プレビュー

全 1,074 問

題庫の元の順序で表示します。回答欄を開くと、正解と収録されている解説を確認できます。

問題の言語：英語。問題文・選択肢・正解・解説は元の題庫の言語で表示します。

免責事項：ExamPico の問題はすべてインターネット上の情報を整理したもので、学習参考用として提供しています。

問題 11

Question#11Topic1

Which of the following exemplifies proper separation of duties?

  1. A. Operators are not permitted modify the system time.
  2. B. Programmers are permitted to use the system console.
  3. C. Console operators are permitted to mount tapes and disks.
  4. D. Tape operators are permitted to use the system console.
正解と解説を表示

正解

A

解説

This is an example of Separation of Duties because operators are prevented from modifying the system time which could lead to fraud. Tasks of this nature should be performed by they system administrators.
AIO defines Separation of Duties as a security principle that splits up a critical task among two or more individuals to ensure that one person cannot complete a risky task by himself.
The following answers are incorrect:
Programmers are permitted to use the system console. Is incorrect because programmers should not be permitted to use the system console, this task should be performed by operators. Allowing programmers access to the system console could allow fraud to occur so this is not an example of Separation of Duties..
Console operators are permitted to mount tapes and disks. Is incorrect because operators should be able to mount tapes and disks so this is not an example of
Separation of Duties.
Tape operators are permitted to use the system console. Is incorrect because operators should be able to use the system console so this is not an example of
Separation of Duties.
References:
OIG CBK Access Control (page 98 - 101)
AIOv3 Access Control (page 182)

問題 12

Question#12Topic1

Which of the following is not a logical control when implementing logical access security?

  1. A. access profiles.
  2. B. userids.
  3. C. employee badges.
  4. D. passwords.
正解と解説を表示

正解

C

解説

Employee badges are considered Physical so would not be a logical control.
The following answers are incorrect:
userids. Is incorrect because userids are a type of logical control. access profiles. Is incorrect because access profiles are a type of logical control. passwords. Is incorrect because passwords are a type of logical control.

問題 13

Question#13Topic1

Which one of the following authentication mechanisms creates a problem for mobile users?

  1. A. Mechanisms based on IP addresses
  2. B. Mechanism with reusable passwords
  3. C. one-time password mechanism.
  4. D. challenge response mechanism.
正解と解説を表示

正解

A

解説

Anything based on a fixed IP address would be a problem for mobile users because their location and its associated IP address can change from one time to the next. Many providers will assign a new IP every time the device would be restarted. For example an insurance adjuster using a laptop to file claims online. He goes to a different client each time and the address changes every time he connects to the ISP.
NOTE FROM CLEMENT:
The term MOBILE in this case is synonymous with Road Warriors where a user is contantly traveling and changing location. With smartphone today that may not be an issue but it would be an issue for laptops or WIFI tablets. Within a carrier network the IP will tend to be the same and would change rarely. So this question is more applicable to devices that are not cellular devices but in some cases this issue could affect cellular devices as well.
The following answers are incorrect:
mechanism with reusable password. This is incorrect because reusable password mechanism would not present a problem for mobile users. They are the least secure and change only at specific interval. one-time password mechanism. This is incorrect because a one-time password mechanism would not present a problem for mobile users. Many are based on a clock and not on the IP address of the user. challenge response mechanism. This is incorrect because challenge response mechanism would not present a problem for mobile users.

問題 14

Question#14Topic1

Organizations should consider which of the following first before allowing external access to their LANs via the Internet?

  1. A. plan for implementing workstation locking mechanisms.
  2. B. plan for protecting the modem pool.
  3. C. plan for providing the user with his account usage information.
  4. D. plan for considering proper authentication options.
正解と解説を表示

正解

D

解説

Before a LAN is connected to the Internet, you need to determine what the access controls mechanisms are to be used, this would include how you are going to authenticate individuals that may access your network externally through access control.
The following answers are incorrect:
plan for implementing workstation locking mechanisms. This is incorrect because locking the workstations have no impact on the LAN or Internet access. plan for protecting the modem pool. This is incorrect because protecting the modem pool has no impact on the LAN or Internet access, it just protects the modem. plan for providing the user with his account usage information. This is incorrect because the question asks what should be done first. While important your primary concern should be focused on security.

問題 15

Question#15Topic1

Which of the following would assist the most in Host Based intrusion detection?

  1. A. audit trails.
  2. B. access control lists.
  3. C. security clearances.
  4. D. host-based authentication.
正解と解説を表示

正解

A

解説

To assist in Intrusion Detection you would review audit logs for access violations.
The following answers are incorrect:
access control lists. This is incorrect because access control lists determine who has access to what but do not detect intrusions. security clearances. This is incorrect because security clearances determine who has access to what but do not detect intrusions. host-based authentication. This is incorrect because host-based authentication determine who have been authenticated to the system but do not dectect intrusions.

ダウンロードと個人利用

  • この試験の練習問題を、1・3・6・12か月のダウンロード期間で個別に購入できます。
  • お支払い確認後、作成状況がマイライブラリに表示されます。PDF の準備完了時にメールでお知らせします。
  • 期間内は再ダウンロードできます。期限後は新しい期間をご購入ください。
  • PDF は個人学習専用です。転売や公開共有は禁止されています。
  • 期限後も端末に保存済みのファイルを遠隔で削除することはありません。
資格試験の選び方