🔥 40% Off Crucial Exams Memberships — This Week Only

2 days, 8 hours remaining!
Crucial Exams

ISC2 Systems Security Certified Practitioner (SSCP) Practice Question

Field engineers gather sensor logs on isolated Windows 10 laptops, copy them to USB sticks, and later upload the files from either Windows or Linux workstations to Amazon S3. Corporate policy requires that every removable drive be encrypted with a FIPS-validated AES-256 implementation, impose almost no extra steps on engineers, and allow the security team to revoke or destroy keys remotely if the drive is lost. Which solution best satisfies these requirements?

  • Issue centrally managed, hardware-encrypted USB drives that perform on-device AES-256 encryption, unlock via a PIN keypad, and support remote kill or key rotation by security administrators.

  • Permit only FAT32-formatted USB drives and rely on server-side encryption when the files are uploaded to an Amazon S3 bucket over TLS.

  • Require engineers to compress logs into AES-256 password-protected 7-Zip archives before copying them to any standard USB flash drive.

  • Force BitLocker To Go encryption through Group Policy and escrow recovery keys in Active Directory, instructing Linux users to mount the drive with third-party tools when needed.

ISC2 Systems Security Certified Practitioner (SSCP)
Systems and Application Security
Your Score:
Settings & Objectives
Random Mixed
Questions are selected randomly from all chosen topics, with a preference for those you haven’t seen before. You may see several questions from the same objective or domain in a row.
Rotate by Objective
Questions cycle through each objective or domain in turn, helping you avoid long streaks of questions from the same area. You may see some repeat questions, but the distribution will be more balanced across topics.

Check or uncheck an objective to set which questions you will receive.

Wipe Score
Bash, the Crucial Exams Chat Bot
AI Bot