SSCP Glossary Terms | Practice Test / Quiz / MCQs

Home > Systems Security Certified Practitioner (SSCP) > Quizzes > SSCP Glossary Terms

SSCP Glossary Terms

Fast practice, instant feedback. Timer auto-submits when time’s up.

Avg score: 46% • Most missed: “due diligence”

Study First Challenge a Friend Stats

SSCP Glossary Terms

Time left 00:00

25 Questions

1. hardening

An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.A protocol that provides an IP address to clients and can be used to retrieve a bootable image for clients. It is similar to Reverse Address Resolution Protocol (RARP), although RARP only retrieves the IP address.

2. subject

An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.A protocol that provides an IP address to clients and can be used to retrieve a bootable image for clients. It is similar to Reverse Address Resolution Protocol (RARP), although RARP only retrieves the IP address.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.

3. Bell-LaPadula model

4. Bootstrap Protocol (BootP)

The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.A protocol that provides an IP address to clients and can be used to retrieve a bootable image for clients. It is similar to Reverse Address Resolution Protocol (RARP), although RARP only retrieves the IP address.

5. port number

The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.Numbers that identify protocols based on assigned well-known ports. For example, SMTP uses TCP port 25. This is not a protocol number, though protocol numbers also identify some protocols. Compare to protocol number and well-known port.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.

6. fault tolerance

An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.The practice of adding and maintaining redundancy for disks, servers, connections, and sites. Fault tolerance controls help eliminate outages from single points of failure by adding redundancies.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.

7. Domain Name System (DNS)

Provides name resolution services by resolving host names to IP addresses and IP addresses to host names. DNS uses port 53.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.

8. vulnerability assessment

A process used to discover vulnerabilities. Vulnerability assessments can use technical tools to scan networks and systems for vulnerabilities. They can also include nontechnical means such as social engineering tactics to determine whether employees are susceptible to social engineering attacks.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.

9. due care

An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.The practice of implementing security policies and practices to protect resources. Organizations are required by law to exercise due care or they can be found legally negligent.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.

10. round robin

An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.A configuration commonly used with load balancing in which the first connection hits the first server, the second connection hits the second server, and so on. The load balancer continues to redirect the connections in the same rotating pattern. Compare to source address affinity.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.

11. chain of custody

An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.A document that shows exactly where a piece of evidence is from the point it is collected until it is disposed. A chain of custody provides proof that evidence has been protected. If the chain-of-custody document is not available, the validity of the evidence can be questioned and its usefulness negated.

12. Voice over Internet Protocol (VoIP)

The different technologies used to transmit multimedia and voice communications over IP networks, including the Internet.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.

13. hot site

An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An alternative location used in business continuity planning. A hot site includes all the necessary resources to take over the operations of another location in a very short period of time, sometimes within minutes. It includes hardware such as servers and the network infrastructure, up-to-date data, and personnel to manage the functions of the alternative location. Compare to cold site, warm site, and mobile site.

14. hybrid cloud

15. service level agreement (SLA)

An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.An agreement between an organization and a vendor. It typically stipulates performance expectations, such as minimum uptime, and can include expectations for the availability and security of dataAn entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.

16. nonrepudiation

The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.The practice of ensuring that a party cannot believably deny (or repudiate) taking an action. Nonrepudiation is enforced through audit logging and with digital signatures.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.

17. integrity

The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.Assurance that data or a system configuration has not been modified. Hashing and audit logs are two methods used to ensure integrity. Integrity is one of the three main goals of information security known as the CIA security triad. The other two goals are confidentiality and availability.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.

18. Clark-Wilson model

An access control model used to ensure integrity; the model has stricter rules than the Biba model. These integrity rules enforce the principle of separation of duties.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.

19. Bluetooth

An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.A wireless technology used for smaller wireless networks commonly called personal area networks (PANs). Devices must be paired with each other before they will communicate.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.

20. buffer overflow

An error that can occur when a system receives more data than it expects and is unable to handle it gracefully. Attackers attempt to exploit buffer overflow errors to install malware on systems.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.

21. symmetric encryption

An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.A process of encrypting and decrypting data using a single key. Symmetric encryption algorithms are constant, while the keys used to encrypt different sets of data are changed to prevent compromise. A popular symmetric encryption is Advanced Encryption Standard (AES).The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.

22. command injection

An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An attack that attempts to inject commands into an application. In some cases, a command injection attack can inject operating system commands that would normally be executed at the command line. In other cases, it injects code such as JavaScript or SQL statements. Input validation techniques help mitigate command injection attacks.

23. mobile site

An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.An alternative location used in business continuity planning. A mobile site can easily be moved and is useful when an organization doesn’t want to designate a specific alternative location. For example, it’s possible to set up the inside of a storage container as an alternative location. These are the same storage containers that 18-wheeler tractor-trailers use to haul goods, and they are as easy to move as any other loads hauled over the highways.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.

24. polymorphic virus

The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.A virus that can morph or mutate each time it replicates to another machine or even each time it is run. When the virus mutates, it can be more difficult for antivirus (AV) software to detect it.

25. lessons learned/implementation of new countermeasures

The last step in the incident lifecycle. It includes a review of the incident, what caused it, what allowed it, and how the organization responded to the incident. This step often includes a review of countermeasures and a recommendation for new countermeasures. See also incident lifecycle.An access control model used to ensure confidentiality. It uses two primary rules: no read up and no write down. Compare to Biba model.An entity that can access a resource referred to as an object. For example, if a user accesses a file, the user is the subject and the file is the object.The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.

⚡ Recently practiced quizzes in this topic

Live quiz activity

SSCP Study Guide Cyber Security MCQs SSCP: Security Operations SSCP: Security Fundamentals SSCP: Access Controls System Analysis and Design Practice Test SSCP: Basic Networking and Communications SSCP: Auditing and Management Processes SSCP: Risk, Response, and Recovery SSCP: Malicious Code and Activity

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know? Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com