CERTIFIED-IN-CYBERSECURITY Practice Questions

What are the three main concepts of access control?

What is the primary benefit of using a rule-based access control (RuBAC) model? ()

What should be included in the Business Continuity Plan (BCP) team members list?

The concept of data integrity refers to:

Choosing NOT to implement the needed security controls is a form of:

Which of the following BEST describes a security solution that enforces policies on devices attempting to access network resources?

What information can be obtained by using the 'ping' command?

What concept is at the center in the concentric circles model of defense in depth? ()

What is the main goal of a Disaster Recovery Plan (DRP)?

What is a Local Area Network (LAN)?

Until the generators start up and stabilize, what do battery backups need to be properly sized to carry?

Which of the following options best describes the concept of Ethernet?

Audit trail logs showed that a bank employee accessed customer accounts and transferred funds to a personal bank account. Which of the following describes this action?

What is the PRIMARY goal of a Denial of Service (DoS) attack?

What is the PRIMARY goal of a firewall on a network?

What should be done if one person is unavailable during an emergency?

Which of the following statements is TRUE about ransomware?

Which is one PRIMARY benefit of having the least privilege principle?

How are permissions typically assigned in a role-based access control (RBAC) model?

What port range refers to dynamic or private ports?

What are three common methods of authentication?

What three intents are found in the ISC2 Code of Ethics?

What is the purpose of the two-person rule in a security strategy?

What is the difference between risk mitigation and risk acceptance?

What are the two PRIMARY transport layer protocols?

What is a Business Impact Analysis (BIA)?

Two healthcare organizations are planning to collaborate on a project. Which of the following can be used to formalize this collaboration agreement?

Which method eliminates residual physical effects from writing original values?

In a healthcare organization, which of the following would be an example of the principle of least privilege?

What is the purpose of a policy?

What is the first step in classifying data stored in an Information System?

What term describes a potential malicious actor that may cause harm to an organization or its assets?

What is the primary category of information specifically regulated by HIPAA?

What is the purpose of risk assessment?

What is the consequence of failing to adhere to the ISC2 Code of Ethics?

What is one requirement of PCI DSS regarding credit card data?

Which of the following is an example of dual control?

Why do many organizations find it challenging to maintain a separate test environment?

Which type of fire suppression system is better for electronics but can be toxic to humans? ()

Which of the following is NOT a type of phishing attack?

Which of the following would help an organization secure its network-critical server that is about to experience a significant power outage?

What is the term used to verify or prove the user's identity?

What is a drawback of biometric authentication?

Which of the following is a technique used to protect the confidentiality of data?

What types of cards can be used as a tool to grant access?

Why is it important to have a rollback plan in place for organizations that do not have the ability to fully test a change?

Which of the following is an example of the principle of least privilege?

Which of the following documents are NOT commonly part of a Disaster Recovery Plan?

Why is it essential for organizations to periodically review their retained records?

An European institution wants different data handling protocols depending on the type of information stored. What does the institution need to do in order to achieve this?