How is this different from a prep book?

A book shows you questions; Prepia learns from your answers. Every session is scored instantly, your progress is tracked by subject area, and missed questions become your next study session. The same bank follows you across phone and web, so practice fits wherever your day happens.

How long do I need to prepare?

Most students study four to eight weeks, but the honest answer depends on your baseline. Start with a practice session, look at your category scores, and put your time where the gaps are. Short, consistent sessions beat cramming: the app is built for exactly that.

Can I study on my phone?

Yes: Prepia runs on iPhone, Android, and any browser with one account and synced progress. Answer ten questions in line for coffee, review rationales on the couch, and take a full practice run at your desk.

What happens if I don't pass?

Our Pass Guarantee kicks in. If you do not pass your exam, we refund your purchase in full. We do not ask for a score report. The full terms are at prepia.com/docs/pass-guarantee.

ISC2 SSCP Prep Online

Systems Security Certified Practitioner

Pass the ISC2 SSCP the first time with expert-designed practice questions, detailed rationales, engaging videos, realistic practice exams, and a proven track record of student success

585
Explained questions: 7
Subject areas: 4.6
Average of 34 app ratings

1-month prep
$49.99 one payment
- Pass Guarantee: 100% money back, no questions asked: included
2-month prep
$89.99 one payment
- Pass Guarantee: 100% money back, no questions asked: included
3-month prep
Most popular
$129.99 one payment
- Pass Guarantee: 100% money back, no questions asked: included
6-month prep
$249.99 one payment
- Pass Guarantee: 100% money back, no questions asked: included

Every subject area, covered

Domain 1: Security Operations and Administration96 questions
Domain 2: Access Controls84 questions
Domain 3: Risk Identification, Monitoring and Analysis93 questions
Domain 4: Incident Response and Recovery83 questions
Domain 5: Cryptography50 questions
Domain 6: Network and Communications Security97 questions
Domain 7: Systems and Application Security82 questions

Start studying for free

app.prepia.com/results

Results

Date: 19th Aug 2026Time Taken: 00:00:31

Domain 6: Network and Communications Security

Answers Result

In a digital meeting, participants connect to a non-persistent virtual desktop infrastructure (VDI) where each desktop is reset to a standard image when the user logs off. However, the organization has not verified that the reset process securely wipes temporary storage (for example, pagefile, swap, temp folders, crash dumps, or cached files) before the image is reused. What is the most likely data security risk in this setup?

Incorrect

A.Sensitive files remain recoverable from temporary storage after logoff
B.Users can intercept other users' network traffic within the VDI environment
C.Data is exposed because all VDI sessions inherently use weak or no encryption
D.Attackers gain access because VDI always requires a shared local administrator account

A network administrator must set up a site-to-site (gateway-to-gateway) VPN between two office networks over the public internet. Which configuration provides the best balance of strong security and good performance for this scenario?

Correct

A.IPSec with AES-256 encryption in tunnel mode
B.L2TP without encryption
C.PPTP with MPPE encryption
D.IPSec with DES encryption in tunnel mode

When collecting digital evidence to establish the chain of custody, what is the first documentation action that should be performed?

Incorrect

A.Record the initial collection details (who collected it, what it is, when/where it was collected, and a unique identifier) on a chain-of-custody record
B.Begin a preliminary forensic analysis of the data
C.Package the device in an anti-static bag for transport
D.Log a handoff between two custodians after the evidence has already been collected

Answers Result

Incorrect

A.Sensitive files remain recoverable from temporary storage after logoff
B.Users can intercept other users' network traffic within the VDI environment
C.Data is exposed because all VDI sessions inherently use weak or no encryption
D.Attackers gain access because VDI always requires a shared local administrator account

The key issue is that a non-persistent VDI reset restores the desktop to a baseline image, but it does not automatically guarantee secure sanitization of all underlying storage areas. If temp files, swap/pagefile contents, caches, or similar artifacts are not wiped, data residue can remain and be recovered by an attacker or subsequent session with sufficient access. The choices about intercepting network traffic, weak encryption being inherent to VDI, or VDI always requiring shared administrator accounts are not specific to the reset behavior described and are not the most likely risk created by an incomplete wipe during reversion.

Correct

A.IPSec with AES-256 encryption in tunnel mode
B.L2TP without encryption
C.PPTP with MPPE encryption
D.IPSec with DES encryption in tunnel mode

For a site-to-site VPN between two networks, IPSec in tunnel mode is typically used so the entire original IP packet is protected and routed between the VPN gateways. The choice mentioning “IPSec with AES-256 encryption in tunnel mode” provides modern, strong encryption with widely supported IPSec tunneling, offering a solid security/performance tradeoff. The choice mentioning “L2TP without encryption” does not provide confidentiality on its own, so it is not appropriate for securing traffic over the internet. The choice mentioning “PPTP with MPPE encryption” is generally considered outdated and vulnerable compared with IPSec-based solutions. The choice mentioning “IPSec with DES encryption” uses weak, deprecated encryption (short key length), making it a poor security choice even if the tunnel mode selection is appropriate.

When collecting digital evidence to establish the chain of custody, what is the first documentation action that should be performed?

Incorrect

A.Record the initial collection details (who collected it, what it is, when/where it was collected, and a unique identifier) on a chain-of-custody record
B.Begin a preliminary forensic analysis of the data
C.Package the device in an anti-static bag for transport
D.Log a handoff between two custodians after the evidence has already been collected

Chain of custody is fundamentally a documentation trail that begins at the moment evidence is collected. The first action is to create the initial chain-of-custody entry by recording who collected the item, what it is, when and where it was collected, and a unique identifier so the item can be tracked and verified from the start. Starting a preliminary analysis occurs only after proper documentation and controls are in place. Packaging the device is important for protection, but it does not by itself establish the chain-of-custody record. Logging a handoff applies later, once there is already an initial record and the evidence is being transferred between custodians.

Understand why,
not only what.

ISC2 SSCP questions test how you apply knowledge in real situations. After every answer, you are provided with a clear rationale so you can understand the reasoning, learn from mistakes, and recognize it when it appears again.

Question 1 of 3

Study anywhere, on any device

Pick up on the web

Same questions, same progress. Log in on any browser and keep going where you left off.

Take it in your pocket

Phone app, same account: five-minute sessions on the bus, in line, between classes.

Every answer shapes what you study next.

Practice
Answer exam-specific questions.
Understand
Learn why each answer is correct.
Focus
Turn misses into your next session.
Improve
Repeat with purpose.

Before you start,
you probably want to know…

The questions students ask us before they start,
answered without the fine print.

Still stuck? Talk to us

Prepia is designed to help you practice the topics, decisions, and pacing required for your exam. Every question includes an explanation so you can review the reasoning behind the answer, not just memorize it. Question banks are updated as exam content changes.

ISC2 SSCP Prep Online

1-month prep

2-month prep

3-month prep

6-month prep

Every subject area, covered

Understand why,not only what.

Study anywhere, on any device

Pick up on the web

Take it in your pocket

Every answer shapes what you study next.

Practice

Understand

Focus

Improve

Before you start,you probably want to know…

Are the questions on practice exams like the ones on the real ISC2 SSCP?

How is this different from a prep book?

How long do I need to prepare?

Can I study on my phone?

What happens if I don't pass?

Understand why,
not only what.

Before you start,
you probably want to know…