Free Practice Questions for ISC2 Systems Security Certified Practitioner (SSCP) Certification

1.1: Comply with codes of ethics

1.2: Understand security concepts

1.3: Identify and implement security controls

1.4: Document and maintain functional security controls

1.5: Support and implement asset management lifecycle (i.e., hardware, software, and data)

1.6: Support and/or implement change management lifecycle

1.7: Support and/or implement security awareness and training (e.g., social engineering/phishing/tabletop exercises/awareness communications)

1.8: Collaborate with physical security operations (e.g., data center/facility assessment, badging and visitor management, personal device restrictions)

2.1: Implement and maintain authentication methods

2.2: Understand and support internetwork trust architectures

2.3: Support and/or implement the identity management lifecycle

2.4: Understand and administer access controls

3.1: Understand risk management

3.2: Understand legal and regulatory concerns (e.g., jurisdiction, limitations, privacy)

3.3: Perform security assessments and vulnerability management activities

3.4: Operate and monitor security platforms (e.g., continuous monitoring)

3.5: Analyze monitoring results

4.1: Understand and support incident response lifecycle (e.g., National Institute of Standards and Technology (NIST), International Organization for Standardization (ISO))

4.2: Understand and support forensic investigations

4.3: Understand and support business continuity plan (BCP) and disaster recovery plan (DRP) activities

5.1: Understand reasons and requirements for cryptography

5.2: Apply cryptography concepts

5.3: Understand and implement secure protocols

5.4: Understand and support public key infrastructure (PKI) systems

6.1: Understand and apply fundamental concepts of networking

6.2: Understand network attacks (e.g., distributed denial of service (DDoS), man-in-the-middle (MITM), Domain Name System (DNS) cache poisoning)

6.3: Manage network access controls

6.4: Manage network security

6.5: Operate and configure network-based security appliances and services

6.6: Secure wireless communications

6.7: Secure and monitor Internet of Things (IoT) (e.g., configuration, network isolation, firmware updates, End of Life (EOL) management)

7.1: Identify and analyze malicious code and activity

7.2: Implement and operate endpoint device security

7.3: Endpoint detection and response (EDR)

7.4: Understand and configure cloud security

7.5: Operate and maintain secure virtual environments