CERTIFIED-IN-CYBERSECURITY Practice Questions

Which network security device is PRIMARILY responsible for monitoring network traffic and detecting potential threats based on predefined rules or signatures?

What network security device filters incoming and outgoing network traffic based on predefined rules and is designed to prevent unauthorized access to or from a protected network?

Which of the following principle states that individuals should be held to a standard of doing what a reasonable person would do under similar circumstances?

is the primary purpose of a forensic investigation during the analysis phase of an incident response?

In the risk management process, which of the following best describes the concept of 'risk acceptance'?

Which of the following incident response team roles is responsible for coordinating communication between the incident response team and external stakeholders, such as law enforcem...

What is the PRIMARY benefit of incorporating real-life examples and scenarios into security awareness training?

Which of the following cloud models puts MOST responsibility on the cloud provider?

Which of the options does not have attributes of a Privileged User Account?

Which principle of the ISC2 Code of Ethics Canons obliges to prioritize public interest and protect critical infrastructure over personal or organizational interests?

Which type of token-based authentication generates codes at fixed intervals without a server challenge? ()

Which of the following is a key component of the risk assessment process?

What type of physical access control mechanism involves the use of electronic cards or key fobs that contain unique identifying information?

What is the primary problem typically associated with decentralized access control? ()

What is the primary goal of an Advanced Persistent Threat (APT) attack?

Which principle is primarily concerned with preventing unauthorized data alteration or destruction?

What is the PRIMARY purpose of using an intrusion detection and prevention system?

What technology prioritizes critical network traffic over browsing and social media? ()

In an organization, which document provides step-by-step guidance in implementing a security measure?

Which of the following is a technical control?

What is the PRIMARY objective of baselines?

What is the primary purpose of a password policy?

What is the primary goal of the Health Insurance Portability and Accountability Act (HIPAA)?

How does encryption contribute to system hardening? ()

What access control model allows the owner of a file to grant access to others via an access control list?

Which of the following tools would be the BEST to prevent unauthorized data exfiltration from a corporate network? ()

Which type of network attack involves an attacker sending specially crafted malicious data to an application or system, causing it to crash or become unresponsive? ()

What is the primary difference between a threat and a vulnerability?

Which of the following physical access control methods is designed to authenticate the identity of individuals entering a facility?

In the context of the risk management process, what does the term 'residual risk' refer to?

To which OSI layer does a MAC address belong to?

Which category of cloud services does a ready-to-use email service fall into?

Which of the following documents establishes context and sets out strategic direction and priorities?

What type of malware is designed to replicate itself and spread to other devices without any user intervention?

Which of the following is an example of a threat vector?

Which of the following is NOT a common system hardening practice?

Which of the following is NOT considered an insider threat?

To ensure cybersecurity practices remain effective, which documents should be regularly updated and reviewed?

Which technology is BEST for port-based authentication to ensure that network clients authenticate before use?

Which of the following is the MOST effective method to destroy a data tape disk?

Which of the following is an example of a measure to protect confidentiality?

Which policy will outline if personally owned equipment is permitted for business purposes?

What type of attack attempts to misdirect legitimate users to malicious websites by abusing URLs or hyperlinks in emails?

Which of the following is NOT a recommended practice for password protection according to the security awareness training examples?

What type of network attack involves an attacker creating a malicious email that appears to come from a legitimate source to trick recipients into revealing sensitive information o...

What is the primary objective of a Business Continuity Plan (BCP) in the context of incident response, business continuity, and disaster recovery concepts?

Which of the following security measures is most effective in protecting PII stored on a laptop in case of theft?

Digital signatures primarily rely on which cryptographic technique?

What is the MOST formal document between a service provider and a customer that sets expectations FOR performance parameters?

Which aspect ensures that authorized users have timely and reliable access to information and resources?