CERTIFIED-IN-CYBERSECURITY Practice Questions

What is the term for retaining and maintaining information for as long as it is needed?

Digital signatures provide which of the following security benefits?

What is the PRIMARY object of security baselines?

Which risk management strategy is a company applying when the cost of implementing controls for a natural disaster outweighs the benefits?

How is personally identifiable information (PII) access limited to only essential information?

What is the name of the network tool that changes and maps source addresses of client requests for client anonymity? ()

What is the likelihood of an earthquake in the downtown area of Paris, if the records show that a big earthquake happens every 100 years?

When developing a business impact analysis, what should be the next step after creating a list of assets?

Which of the following logical access control models uses a set of rules to determine whether a subject can access a specific object?

Which one of the following is PRIMARILY used for identification purposes and is not suitable for use as an authenticator?

What is the PRIMARY goal of security training?

Which type of disaster recovery test has the LEAST possible impact on regular information system operations?

What term is used to describe a large collection of unrelated patches released together?

What is the main purpose of an Acceptable Use Policy (AUP)?

Which of the following is NOT a principle of the ISC2 code of ethics?

The Memorandum of Understanding (MOU)/Memorandum of Agreement (MOA) is ...

What responsibility do you have as a member of the data protection team?

Why is it important to conduct security awareness training regularly?

What security principle is being adhered to when a user's access request is declined, despite meeting the necessary security clearance, because there is no business justification f...

Which of the following documents is developed by governments or industry regulators to enforce specific requirements for cybersecurity?

What type of control is commonly exemplified by dogs, guards, and fences?

Which ISC2 Code of Ethics Canon emphasizes a security analyst's duty to avoid harm and uphold public well- being?

Data at rest is TYPICALLY vulnerable to which type of security risk? ()

What cloud service provides the highest level of flexibility and customization for the organization?

What is the problem when a NAT router uses a 192.168.x.x subnet and has an external IP of 192.168.1.40?

Which cryptographic attribute is demonstrated when Alice proves that Bob's message undeniably came from him?

During a security incident response, where will an incident responder member find the most recent modification to a system's security settings? ()

A hash function is ...:

Which of the following is NOT considered a threat actor?

What is a threat?

What receives a label in a MAC model?

What ports are typically used to identify unencrypted FTP traffic by an IDS?

What is the best technology for detecting unauthorized storage of sensitive data on hard drives? ()

What is a zero-day vulnerability?

Which term is used to denote the standard permissions assigned to a user account upon creation?

The PRIMARY objective of the Risk Management process is...:

Which type of documentation is commonly created once an incident has been remediated?

Which of the following layers is NOT a TCP Architecture layer?

What term refers to a facility that is equipped with HVAC, power, and communications circuits, but does not have hardware for a business to use during a disaster?

What is the primary goal of a visitor management policy as part of physical access controls?

Which of the following is a common topic covered in security awareness training?

Which OSI model layer is responsible for the end-to-end transmission of data between two hosts?

Which of the following can be considered an example of a computer security incident?

What type of malware is used to take hostage a user's data and require a ransom payment for release?

What is the main difference between 'ingress' monitoring and 'egress' monitoring?

Which aspect of the CIA Triad focuses on ensuring that the information is accessible when it is needed?

What cloud service is recommended for developers to create applications?

What phase of the incident response process is aimed at minimizing the impact or extent of an incident?

What is the difference between Network Access Control (NAC) and a Virtual Private Network (VPN)?

What mechanism among the following is typically NOT used as an anti-fraud measure?