SSCP Exam Preparation: Violation Record Threshold

Violation Record Threshold

Prev Question Next Question

Question

The number of violations that will be accepted or forgiven before a violation record is produced is called which of the following?

Answers

Explanations

Click on the arrows to vote for the correct answer

A. B. C. D.

A.

The correct answer is "clipping level"

This is the point at which a system decides to take some sort of action when an action repeats a preset number of times.

That action may be to log the activity, lock a user account, temporarily close a port, etc.

Example: The most classic example of a clipping level is failed login attempts.

If you have a system configured to lock a user's account after three failed login attemts, that is the "clipping level"

The other answers are not correct because: Acceptance level, forgiveness level, and logging level are nonsensical terms that do not exist (to my knowledge) within network security.

I cannot find it in the text either.

However, I'm quite certain that it would be considered part of the CBK, despite its exclusion from the Official Guide.

All in One Third Edition page: 136 - 137

The correct answer is A. Clipping level.

Clipping level refers to the threshold or limit set for the number of security violations that can occur before a violation record is produced. It is a parameter that determines when a security event is important enough to be logged or recorded.

When a system is configured with a specific clipping level, any security events that are below that threshold are ignored or "clipped." Only security events that exceed the clipping level are recorded in a violation log, which can then be used to investigate and address security issues.

The other options are incorrect:

B. Acceptance level is not a term typically used in the context of security. It could refer to the level of acceptance of risk by an organization or individual.

C. Forgiveness level is not a common term in the context of security, but it could refer to the number of security violations that are allowed before disciplinary action is taken.

D. Logging level refers to the level of detail recorded in logs, rather than the number of violations that trigger logging. It could refer to the amount of information recorded in logs, such as detailed debugging information or only basic events.