CERTIFIED-IN-CYBERSECURITY Practice Questions

An entity that acts to exploit a target organization's system vulnerabilities is a:

Security posters are an element PRIMARILY employed in: ()

A best practice of patch management is to:

Which of the following is NOT a social engineering technique? ()

Governments can impose financial penalties as a consequence of breaking a:

Malicious emails that aim to attack company executives are an example of:

Which of these is the PRIMARY objective of a Disaster Recovery Plan?

Which of the following is NOT a protocol of the OSI Level 3?

Which type of attack attempts to trick the user into revealing personal information by sending a fraudulent message?

Which of the following documents contains elements that are NOT mandatory?

The process of verifying or proving the user's identification is known as:

Which of these is NOT a change management component?

Which type of key can be used to both encrypt and decrypt the same message?

Which of these has the PRIMARY objective of identifying and prioritizing critical business processes?

How many layers does the OSI model have?

Which type of attack embeds malicious payload inside a reputable or trusted software?

A security safeguard is the same as a:

Which of the following properties is NOT guaranteed by Digital Signatures?

According to the canon "Provide diligent and competent service to principals", (ISC)?professionals are to:

Which of the following is an example of 2FA?

Which of the following principles aims primarily at fraud detection?

Which cloud deployment model is suited to companies with similar needs and concerns?

Which of the following is NOT a possible model for an Incident Response Team (IRT)?

A web server that accepts requests from external clients should be placed in which network?

A device found not to comply with the security baseline should be:

What is the consequence of a Denial of Service attack?

The process that ensures that system changes do not adversely impact business operations is known as:

An exploitable weakness or flaw in a system or component is a:

Which of the following are NOT types of security controls?

Sensitivity is a measure of the ...:

What is an effective way of hardening a system?

Which of the following is an example of a technical security control?

In which cloud model does the cloud customer have LESS responsibility over the infrastructure? ()

Which of the following types of devices inspect packet header information to either allow or deny network traffic?

Which of the following areas is the most distinctive property of PHI?

Which type of attack attempts to gain information by observing the device's power consumption? ()

Which type of attack has the PRIMARY objective of encrypting devices and their data, and then demanding a ransom payment for the decryption key?

Which of these types of user is LESS likely to have a privileged account?

Which regulations address data protection and privacy in Europe?

What does SIEM mean?

Which of the following is a public IP?

How many data labels are considered manageable?

In order to find out whether personal tablet devices are allowed in the office, which of the following policies would be helpful to read?

In incident terminology, the meaning of Zero Day is:

Which type of attack PRIMARILY aims to make a resource inaccessible to its intended users?

Which of the following attacks take advantage of poor input validation in websites?

Which of these would be the best option if a network administrator needs to control access to a network?

Which of these tools is commonly used to crack passwords? ()

In which of the following phases of an Incident Recovery Plan are incident responses prioritized?

Which of the following cloud models allows access to fundamental computer resources? ()