SSCP Glossary Terms | Practice Test / Quiz / MCQs

Home > Systems Security Certified Practitioner (SSCP) > Quizzes > SSCP Glossary Terms

SSCP Glossary Terms

Fast practice, instant feedback. Timer auto-submits when time’s up.

Avg score: 46% • Most missed: “due diligence”

Study First Challenge a Friend Stats

SSCP Glossary Terms

Time left 00:00

25 Questions

1. GNU Privacy Guard (GnuPG or GPG)

A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A security control that attempts to prevent security incidents. The most basic type of preventive controls consists of written security policies, standards, and procedures.A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.

2. incremental backup

An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A security control that attempts to prevent security incidents. The most basic type of preventive controls consists of written security policies, standards, and procedures.

3. impact assessment

A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A security control that attempts to prevent security incidents. The most basic type of preventive controls consists of written security policies, standards, and procedures.An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.

4. preventive control

A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A security control that attempts to prevent security incidents. The most basic type of preventive controls consists of written security policies, standards, and procedures.An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.

5. hardening

The practice of making a system more secure from its default configuration. Hardening often includes removing or disabling unused protocols and services, changing defaults, keeping systems up to date, enabling firewalls, and using AV software.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.

6. Terminal Access Controller Access Control System + (TACACS+)

A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.An alternative to RADIUS to provide centralized authentication, authorization, and accounting (AAA) services for remote clients. TACACS+ provides improvements over TACACS, and both TACACS and TACACS+ use port 49. TACACS+ uses Transmission Control Protocol (TCP). TACACS uses User Datagram Protocol (UDP).A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.

7. star

An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.Network configuration where all computing devices are connected to a central device, such as a hub or a switch. Most networks use a star configuration, with all the devices connected to the central device with twisted pair cable. See also bus, mesh, token ring, and tree.A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).

8. near field communication (NFC)

A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.Technology in smartphones that allows a user to transfer information to other devices by waving a smartphone close to the other device or tapping the other device. NFC can be used to make purchases with credit cards registered on the phone.An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.

9. information rights management (IRM)

A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.Methods used to protect documents after they’ve been sent to an untrusted party. IRM can prevent recipients from forwarding, copying, modifying, printing, faxing, or pasting the contents from a file.

10. private IP address

An IP address used within an organization’s private network. RFC 1918 formally defines private IP addresses. Compare to public IP address.A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.

11. token ring

An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A network configuration where all computing devices are connected in a logical circle. Devices can transmit data onto the network only when they have a logical token that is passed from device to device. See also bus, mesh, star, and tree.A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).

12. cross-site scripting (XSS)

A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.An attack that attempts to inject HTML or JavaScript into a web page. After the attack, the code executes on a user’s system when the user visits the attacked website. Successful attacks sometimes allow attackers to read cookies and use this data to launch session-hijacking attacks.

13. single sign-on (SSO)

An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.The practice of allowing a subject (such as a user) to authenticate once and use the same credentials to access additional resources without authenticating again. This increases security because users have to remember only a single set of credentials and are less likely to write their credentials down. Federated access SSO systems allow users to access systems owned and managed by different organizations by logging on once using credentials recognized by the federated access system.

14. shoulder surfing

A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).The practice of attempting to gain information by looking over a user’s shoulder as he or she is entering data.

15. private cloud

A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A cloud-based service available only to users within an organization. As an example, a company can set up cloud-based storage for its employees. Compare to public cloud, community cloud, and hybrid cloud.A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.

16. rootkit

An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A set of programs that can run on a system largely undetected. It has root-level access to the system, similar to how a root-level administrator has full and complete control over a system.

17. Internet Message Access Protocol version 4 (IMAP4)

An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A protocol used to manage e-mail in folders. IMAP4 servers store e-mail on the server and allow users to organize the e-mail in folders. It uses TCP port 143 or port 993 with Transport Layer Security (TLS). Compare to Post Office Protocol version 3 (POP3) and Simple Mail Transfer Protocol (SMTP).A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.

18. recovery time objective (RTO)

An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.The maximum amount of time that can be taken to restore a system or process to operation. If a failure takes longer than the RTO to restore, then it impacts the mission. The maximum acceptable outage (MAO) helps an organization determine the RTO.

19. Trivial FTP (TFTP)

A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A stripped-down version of FTP that provides very basic capabilities. It doesn’t support authentication and doesn’t use TCP to establish a session. However, it is very useful when transferring configuration files to and from network devices. TFTP uses UDP port 69.An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.

20. incident lifecycle

A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.All the steps before, during, and after a security incident. It includes preparation, detection, analysis, escalation, containment, eradication, recovery, and lessons learned/implementation of new countermeasures.

21. distributed denial of service (DDoS)

A DoS attack launched against a single system from multiple attackers. Botnets are often used in DDoS attacks. Compare to denial of service (DoS).An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.

22. buffer overflow

A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).An error that can occur when a system receives more data than it expects and is unable to handle it gracefully. Attackers attempt to exploit buffer overflow errors to install malware on systems.

23. multifactor authentication

An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).Authentication using more than one factor. There are three factors of authentication: something you know (such as a password), something you have (such as a smart card), and something you are (using biometrics). Compare to single factor authentication and dual factor authentication.A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.

24. audit

A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).Inspection of activity and configurations within an organization to verify that personnel are following required policies and procedures. An audit can also be done by reviewing logs to reconstruct past events and create an audit trail.A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.

25. round robin

An evaluation of the magnitude of harm that could result if a threat exploits a vulnerability. Impact assessments are often completed with risk assessments. See also risk assessment.A free, open source alternative to Pretty Good Privacy (PGP). It includes technologies that allow individuals to encrypt, decrypt, and digitally sign e-mails using self-signed certificates instead of a certificate issued by a certificate authority (CA). See also web of trust (WOT).A type of backup used in full/incremental backup strategies. Incremental backups back up only data that has changed since the last full or incremental backup. Compare to differential backup.A configuration commonly used with load balancing in which the first connection hits the first server, the second connection hits the second server, and so on. The load balancer continues to redirect the connections in the same rotating pattern. Compare to source address affinity.

⚡ Recently practiced quizzes in this topic

Live quiz activity

SSCP Study Guide Cyber Security MCQs SSCP: Security Operations SSCP: Security Fundamentals SSCP: Access Controls System Analysis and Design Practice Test SSCP: Basic Networking and Communications SSCP: Auditing and Management Processes SSCP: Risk, Response, and Recovery SSCP: Malicious Code and Activity

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

25 Questions

❤ If you liked Fatskills, consider supporting us by checking out The Life Manuals You Never Got.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know? Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson© 2026 Fatskills.com

All trademarks, logos and brand names are the property of their respective owners. All company, product and service names used in this website are for identification purposes only. Use of these names, trademarks and brands does not imply endorsement.

About | Explore | User Guide | Topics | Subjects | Doubt Solver | Career Aptitude Test | Answers | Free Tools | OSHA Basics Quiz | What Should We Know?
Privacy | Terms |

Without work one finishes nothing. - Ralph Waldo Emerson
© 2026 Fatskills.com