ISC2 Certified In Cybersecurity (CC) Practice Exam Preparation
ISC2 CERTIFIED IN CYBERSECURITY (CC) PRACTICE EXAM
PREPARATION FOR 2025/2026 COMPLETE 200
QUESTIONS AND CORRECT ANSWERS |ALREADY GRADED
A+||BRAND NEW!!
Tina is an (ISC)² member and is invited to join an online group of IT security
enthusiasts. After attending a few online sessions, Tina learns that some
participants in the group are sharing malware with each other, in order to use it
against other organizations online. What should Tina do?
A. Nothing
B. Stop participating in the group
C. Report the group to law enforcement
D. Report the group to (ISC)2
B. Stop participating
A bollard is a post set securely in the ground in order to prevent a vehicle from
entering an area or driving past a certain point. Bollards are an example of ______
controls.
A. Physical
B. Administrative
C. Drastic
D. Technical
A. Physical
Triffid Corporation has a policy that all employees must receive security awareness
instruction before using email; the company wants to make employees aware of
potential phishing attempts that the employees might receive via email. What
kind of control is this instruction?
A. Administrative
B. Finite
1|Page
, ISC2 Certified In Cybersecurity (CC) Practice Exam Preparation
C. Physical
D. Technical
A. Administrative
The Triffid Corporation publishes a strategic overview of the company's intent to
secure all the data the company possesses. This document is signed by Triffid
senior management. What kind of document is this?
A. Policy
B. Procedure
C. Standard
D. Law
A. Policy
Chad is a security practitioner tasked with ensuring that the information on the
organization's public website is not changed by anyone outside the organization.
This task is an example of ensuring _________.
A. Confidentiality
B. Integrity
C. Availability
D. Confirmation
B. Integrity
The city of Grampon wants to ensure that all of its citizens are protected from
malware, so the city council creates a rule that anyone caught creating and
launching malware within the city limits will receive a fine and go to jail. What
kind of rule is this?
A. Policy
B. Procedure
C. Standard
D. Law
D. Law
2|Page
, ISC2 Certified In Cybersecurity (CC) Practice Exam Preparation
Zarma is an (ISC)² member and a security analyst for Triffid Corporation. One of
Zarma's colleagues is interested in getting an (ISC)2 certification and asks Zarma
what the test questions are like. What should Zarma do?
A. Inform (ISC)2
B. Explain the style and format of the questions, but no detail
C. Inform the colleague's supervisor
D. Nothing
B. Explain the style and format of the questions, but no detail
Druna is a security practitioner tasked with ensuring that laptops are not stolen
from the organization's offices. Which sort of security control would probably be
best for this purpose?
A. Technical
B. Observe
C. Physical
D. Administrative
C. Physical
For which of the following assets is integrity probably the most important security
aspect?
A. One frame of a streaming video
B. The file that contains passwords used to authenticate users
C. The color scheme of a marketing website
D. Software that checks the spelling of product descriptions for a retail website
B. The file that contains passwords used to authenticate users
Jengi is setting up security for a home network. Jengi decides to configure MAC
address filtering on the router, so that only specific devices will be allowed to join
the network. This is an example of a(n)_______ control.
A. Physical
B. Administrative
C. Substantial
D. Technical
3|Page
, ISC2 Certified In Cybersecurity (CC) Practice Exam Preparation
D. Technical
Siobhan is an (ISC)² member who works for Triffid Corporation as a security
analyst. Yesterday, Siobhan got a parking ticket while shopping after work. What
should Siobhan do?
A. Inform (ISC)2
B. Pay the parking ticket
C. Inform supervisors at Triffid
D. Resign employment from Triffid
B. Pay the parking ticket
Hoshi is an (ISC)² member who works for the Triffid Corporation as a data
manager. Triffid needs a new firewall solution, and Hoshi is asked to recommend a
product for Triffid to acquire and implement. Hoshi's cousin works for a firewall
vendor; that vendor happens to make the best firewall available. What should
Hoshi do?
A. Recommend a different vendor/product
B. Recommend the cousin's product
C. Hoshi should ask to be recused from the task
D. Disclose the relationship, but recommend the vendor/product
D. Disclose the relationship, but recommend the vendor/product
Of the following, which would probably not be considered a threat?
A. Natural disaster
B. Unintentional damage to the system cause by a user
C. A laptop with sensitive data on it
D. An external attacker trying to gain unauthorized access to the environment
C. A laptop with sensitive data on it
A vendor sells a particular operating system (OS). In order to deploy the OS
securely on different platforms, the vendor publishes several sets of instructions
on how to install it, depending on which platform the customer is using. This is an
4|Page
ISC2 CERTIFIED IN CYBERSECURITY (CC) PRACTICE EXAM
PREPARATION FOR 2025/2026 COMPLETE 200
QUESTIONS AND CORRECT ANSWERS |ALREADY GRADED
A+||BRAND NEW!!
Tina is an (ISC)² member and is invited to join an online group of IT security
enthusiasts. After attending a few online sessions, Tina learns that some
participants in the group are sharing malware with each other, in order to use it
against other organizations online. What should Tina do?
A. Nothing
B. Stop participating in the group
C. Report the group to law enforcement
D. Report the group to (ISC)2
B. Stop participating
A bollard is a post set securely in the ground in order to prevent a vehicle from
entering an area or driving past a certain point. Bollards are an example of ______
controls.
A. Physical
B. Administrative
C. Drastic
D. Technical
A. Physical
Triffid Corporation has a policy that all employees must receive security awareness
instruction before using email; the company wants to make employees aware of
potential phishing attempts that the employees might receive via email. What
kind of control is this instruction?
A. Administrative
B. Finite
1|Page
, ISC2 Certified In Cybersecurity (CC) Practice Exam Preparation
C. Physical
D. Technical
A. Administrative
The Triffid Corporation publishes a strategic overview of the company's intent to
secure all the data the company possesses. This document is signed by Triffid
senior management. What kind of document is this?
A. Policy
B. Procedure
C. Standard
D. Law
A. Policy
Chad is a security practitioner tasked with ensuring that the information on the
organization's public website is not changed by anyone outside the organization.
This task is an example of ensuring _________.
A. Confidentiality
B. Integrity
C. Availability
D. Confirmation
B. Integrity
The city of Grampon wants to ensure that all of its citizens are protected from
malware, so the city council creates a rule that anyone caught creating and
launching malware within the city limits will receive a fine and go to jail. What
kind of rule is this?
A. Policy
B. Procedure
C. Standard
D. Law
D. Law
2|Page
, ISC2 Certified In Cybersecurity (CC) Practice Exam Preparation
Zarma is an (ISC)² member and a security analyst for Triffid Corporation. One of
Zarma's colleagues is interested in getting an (ISC)2 certification and asks Zarma
what the test questions are like. What should Zarma do?
A. Inform (ISC)2
B. Explain the style and format of the questions, but no detail
C. Inform the colleague's supervisor
D. Nothing
B. Explain the style and format of the questions, but no detail
Druna is a security practitioner tasked with ensuring that laptops are not stolen
from the organization's offices. Which sort of security control would probably be
best for this purpose?
A. Technical
B. Observe
C. Physical
D. Administrative
C. Physical
For which of the following assets is integrity probably the most important security
aspect?
A. One frame of a streaming video
B. The file that contains passwords used to authenticate users
C. The color scheme of a marketing website
D. Software that checks the spelling of product descriptions for a retail website
B. The file that contains passwords used to authenticate users
Jengi is setting up security for a home network. Jengi decides to configure MAC
address filtering on the router, so that only specific devices will be allowed to join
the network. This is an example of a(n)_______ control.
A. Physical
B. Administrative
C. Substantial
D. Technical
3|Page
, ISC2 Certified In Cybersecurity (CC) Practice Exam Preparation
D. Technical
Siobhan is an (ISC)² member who works for Triffid Corporation as a security
analyst. Yesterday, Siobhan got a parking ticket while shopping after work. What
should Siobhan do?
A. Inform (ISC)2
B. Pay the parking ticket
C. Inform supervisors at Triffid
D. Resign employment from Triffid
B. Pay the parking ticket
Hoshi is an (ISC)² member who works for the Triffid Corporation as a data
manager. Triffid needs a new firewall solution, and Hoshi is asked to recommend a
product for Triffid to acquire and implement. Hoshi's cousin works for a firewall
vendor; that vendor happens to make the best firewall available. What should
Hoshi do?
A. Recommend a different vendor/product
B. Recommend the cousin's product
C. Hoshi should ask to be recused from the task
D. Disclose the relationship, but recommend the vendor/product
D. Disclose the relationship, but recommend the vendor/product
Of the following, which would probably not be considered a threat?
A. Natural disaster
B. Unintentional damage to the system cause by a user
C. A laptop with sensitive data on it
D. An external attacker trying to gain unauthorized access to the environment
C. A laptop with sensitive data on it
A vendor sells a particular operating system (OS). In order to deploy the OS
securely on different platforms, the vendor publishes several sets of instructions
on how to install it, depending on which platform the customer is using. This is an
4|Page
