(ISC)2 SSCP Systems Security Certified Practitioner Official Practice Tests, 2nd Edition

Chapter 5Cryptography (Domain 5)

THE SSCP EXAM TOPICS COVERED IN THIS CHAPTER INCLUDE:

• Domain 5.0: Cryptography
  • 5.1 Understand reasons and requirements for cryptography
    • Confidentiality
    • Integrity and authenticity
    • Data sensitivity (e.g., personally identifiable information (PII), intellectual property (IP), protected health

      information (PHI))

    • Regulatory and industry best practice (e.g., Payment Card Industry Data Security Standard (PCI DSS), International Organization for Standardization (ISO))
  • 5.2 Apply cryptography concepts
    • Hashing
    • Salting
    • Symmetric/asymmetric encryption/Elliptic Curve

      Cryptography (ECC)

    • Non-repudiation (e.g., digital signatures/certificates,

      Hash-based Message Authentication Code (HMAC), audit trails)

    • Strength of encryption ...