ISC2 Certified In Cybersecurity (CC) Practice Exam Questions with 100% Correct Answers 2024.

ISC2 Certified In Cybersecurity (CC) Practice Exam Questions with 100% Correct Answers 2024. A vendor sells a particular operating system (OS). In order to deploy the OS securely on different platforms, the vendor publishes several sets of instructions on how to install it, depending on which platform the customer is using. This is an example of ______. A. Law B. Procedure C. Standard D. Policy B. Procedure The city of Grampon wants to know where all its public vehicles (garbage trucks, police cars, etc.) are at all times, so the city has GPS transmitters installed in all the vehicles. What kind of control is this? A. Administrative B. Entrenched C. Physical D. Technical D. Technical Triffid Corporation has a rule that all employees working with sensitive hardcopy documents must put the documents into a safe at the end of the workday, where they are locked up until the following workday. What kind of control is the process of putting the documents into the safe? A. Administrative B. Tangential C. Physical D. Technical A. Administrative Grampon municipal code requires that all companies that operate within city limits will have a set of processes to ensure employees are safe while working with hazardous materials. Triffid Corporation creates a checklist of activities employees must follow while working with hazardous materials inside Grampon city limits. The municipal code is a ______, and the Triffid checklist is a ________. A. Law, procedure B. Standard, law C. Law, standard D. Policy, standard E. Policy, law A. Law, procedure Which of the following is an example of a "something you know" authentication factor? A. User ID B. Password C. Fingerprint D. Iris scan B. Password Tina is an (ISC)² member and is invited to join an online group of IT security enthusiasts. After attending a few online sessions, Tina learns that some participants in the group are sharing malware with each other, in order to use it against other organizations online. What should Tina do? A. Nothing B. Stop participating in the group C. Report the group to law enforcement D. Report the group to (ISC)2 B. Stop participating A bollard is a post set securely in the ground in order to prevent a vehicle from entering an area or driving past a certain point. Bollards are an example of ______ controls. A. Physical B. Administrative C. Drastic D. Technical A. Physical Triffid Corporation has a policy that all employees must receive security awareness instruction before using email; the company wants to make employees aware of potential phishing attempts that the employees might receive via email. What kind of control is this instruction? A. Administrative B. Finite C. Physical D. Technical A. Administrative The Triffid Corporation publishes a strategic overview of the company's intent to secure all the data the company possesses. This document is signed by Triffid senior management. What kind of document is this? A. Policy B. Procedure C. Standard D. Law A. Policy Chad is a security practitioner tasked with ensuring that the information on the organization's public website is not changed by anyone outside the organization. This task is an example of ensuring _________. A. Confidentiality B. Integrity C. Availability D. Confirmation B. Integrity The city of Grampon wants to ensure that all of its citizens are protected from malware, so the city council creates a rule that anyone caught creating and launching malware within the city limits will receive a fine and go to jail. What kind of rule is this? A. Policy B. Procedure C. Standard D. Law D. Law Zarma is an (ISC)² member and a security analyst for Triffid Corporation. One of Zarma's colleagues is interested in getting an (ISC)2 certification and asks Zarma what the test questions are like. What should Zarma do? A. Inform (ISC)2 B. Explain the style and format of the questions, but no detail C. Inform the colleague's supervisor D. Nothing B. Explain the style and format of the questions, but no detail Druna is a security practitioner tasked with ensuring that laptops are not stolen from the organization's offices. Which sort of security control would probably be best for this purpose? A. Technical B. Observe C. Physical D. Administrative C. Physical For which of the following assets is integrity probably the most important security aspect? A. One frame of a streaming video B. The file that contains passwords used to authenticate users C. The color scheme of a marketing website D. Software that checks the spelling of product descriptions for a retail website B. The file that contains passwords used to authenticate users Jengi is setting up security for a home network. Jengi decides to configure MAC address filtering on the router, so that only specific devices will be allowed to join the network. This is an example of a(n)_______ control. A. Physical B. Administrative C. Substantial D. Technical D. Technical Siobhan is an (ISC)² member who works for Triffid Corporation as a security analyst. Yesterday, Siobhan got a parking ticket while shopping after work. What should Siobhan do? A. Inform (ISC)2 B. Pay the parking ticket C. Inform supervisors at Triffid D. Resign employment from Triffid B. Pay the parking ticket Hoshi is an (ISC)² member who works for the Triffid Corporation as a data manager. Triffid needs a new firewall solution, and Hoshi is asked to recommend a product for Triffid to acquire and implement. Hoshi's cousin works for a firewall vendor; that vendor happens to make the best firewall available. What should Hoshi do? A. Recommend a different vendor/product B. Recommend the cousin's product C. Hoshi should ask to be recused from the task D. Disclose the relationship, but recommend the vendor/product D. Disclose the relationship, but recommend the vendor/product Of the following, which would probably not be considered a threat? A. Natural disaster B. Unintentional damage to the system cause by a user C. A laptop with sensitive data on it D. An external attacker trying to gain unauthorized access to the environment C. A laptop with sensitive data on it Sophia is visiting Las Vegas and decides to put a bet on a particular number on a roulette wheel. This is an example of _________. A. Acceptance B. Avoidance C. Mitigation D. Transference A. Acceptance In risk management concepts, a(n) ___________ is something or someone that poses risk to an organization or asset. A. Fear B. Threat C. Control D. Asset B. Threat Who approves the incident response policy? A. (ISC)2 B. Senior management C. The security manager D. Investor B. Senior management When should a business continuity plan (BCP) be activated? A. As soon as possible B. At the very beginning of a disaster C. When senior management decides D. When instructed to do so by regulators C. When senior management decides True or False? Business continuity planning is a reactive procedure that restores business operations after a disruption occurs. A. True B. False B. False What is the goal of an incident response effort? A. No incident ever happen B. Reduce the impact of incidents on operations C. Punish wrongdoers D. Save money B. Reduce the impact of incidents on operations What is the risk associated with delaying resumption of full normal operations after a disaster? A. People might be put in danger B. The impact of running alternate operations for extended periods C. A new disaster might emerge D. Competition B. The impact of running alternate operations for extended periods You are reviewing log data from a router; there is an entry that shows a user sent traffic through the router at 11:45 am, local time, yesterday. This is an example of a(n) _______. A. Incident B. Event C. Attack D. Threat B. Event Which of the following are not typically involved in incident detection? A. Users B. Security analysts C. Automated tools D. Regulators D. Regulators Prachi works as a database administrator for Triffid, Inc. Prachi is allowed to add or delete users, but is not allowed to read or modify the data in the database itself. When Prachi logs onto the system, an access control list (ACL) checks to determine which permissions Prachi has. In this situation, what is the database? A. The object B. The rule C. The subject D. The site The object Gelbi is a Technical Support analyst for Triffid, Inc. Gelbi sometimes is required to install or remove software. Which of the following could be used to describe Gelbi's account? A. Privileged B. Internal C. External D. User A. Privileged A human guard monitoring a hidden camera could be considered a ______ control. A. Detective B. Preventive C. Deterrent D. Logical A. Detective In order for a biometric security to function properly, an authorized person's physiological data must be ______. A. Broadcast B. Stored C. Deleted D. Modified B. Stored A _____ is a record of something that has occurred. A. Biometric B. Law