CERTIFIED-IN-CYBERSECURITY Practice Questions

What is the primary goal of disaster recovery in the cybersecurity context?

What is access control policy?

What is the purpose of data breach notification laws or regulations?

Which of the following is a best practice for securing email communications?

What is the primary objective of network security?

Our networking department is recommending we use a full duplex solution for an implementation. What is a KEY FEATURE of those?

After an attack we have suffered a loss of public confidence, which leg of the CIA was compromised?

You can MOST LIKELY be held liable when you display which of these?

Which of these is not an attack against an IP network?

Which of these is the most efficient and effective way to test a business continuity plan?

The Bell and LaPadula access control model is a form of: ()

Which access control model specifies access to an object based on the subject's role in the organization?

The predetermined set of instructions or procedures to sustain business operations after a disaster is commonly known as:

After an earthquake disrupting business operations, which document contains the procedures required to return business to normal operation?

The last phase in the data security cycle is:

With respect to risk management, which of the following options should be prioritized?

Which of the following is an example of an administrative security control?

Which of the following canons is found in the (ISC)?code of ethics?

Which of the following is NOT a feature of a cryptographic hash function?

As an IT Security professional, you are expected to perform due care. What does this mean?

For our authentication, we are looking at knowledge factors. Which is the MOST common knowledge factor in use today?

Using Mandatory Access Control (MAC), we would use clearance for assigning which of these?

Which type of Intrusion Detection Systems (IDS) and Intrusion Prevention System (IPS) are completely vulnerable to 0-day attacks?

Which of these exercises goes through a sample of an incident step-by-step, validating what each person will do?

Which type of recovery site has some or most systems in place, but does not have the data needed to take over operations? ()

An organization that uses a layered approach when designing its security architecture is using which of these security approaches?

What does the term 'data remanence' refer?

Which of these different sub-masks will allow 30 hosts? ()

Which type of attack PRIMARILY aims to consume all the available resources, thereby making an organization's service inaccessible to its intended users?

Which port number corresponds to the Simple Mail Transfer Protocol (SMTP)?

By implementing a layered defense strategy across our organization, what do we improve?

You are talking to a new manager of our helpdesk. You are explaining how we do risk analysis. They ask you: "How do you define a vulnerability?"

When an attacker is using a brute force attack to break a password, what are they doing?

In Change Management, which component addresses the procedures needed to undo changes?

Which of the following is NOT an element of System Security Configuration Management?

Which concept describes an information security strategy that integrates people, technology and operations in order to establish security controls across multiple layers of the org...

Which of the following Cybersecurity concepts guarantees that information is accessible only to those authorized to access it?

The magnitude of the harm expected as a result of the consequences of an unauthorized disclosure, modification, destruction, or loss of information, is known as the: