CERTIFIED-IN-CYBERSECURITY Practice Questions

Which type of network attack involves an attacker intercepting and potentially altering the communication between two parties without their knowledge?

Which of the following controls safeguards an organization during a blackout power outage?

Which attacks involve an attacker using a list of pre-computed hashes to find a matching hash value for a user's password? ()

What is the term for the GDPR requirement allowing individuals to request the termination of their data dissemination? ()

In the context of risk management, what is the purpose of risk mitigation?

Which one of the following security tools would be in the best position to detect malicious behavior in a device (e.g., your personal computer)?

What type of authentication factor is voice pattern recognition?

Which of the following is an example of a threat actor?

Which of the following is a logical access control method that verifies the identity of a user before granting access to a system?

Which of the following types of information is considered PII?

What type of factor is a callback to a mobile phone?

What network security device allows remote users to securely connect to a private network over the public Internet by encrypting their communications?

What term is used to describe phishing attacks that specifically target company administrators?

What is the primary goal of a Disaster Recovery Plan (DRP)?

A security analyst discovers a vulnerability in a client's system but decides to withhold the information, fearing negative publicity for the client. Which ISC2 Code of Ethics Cano...

What attribute is NOT associated with a hashing algorithm?

What technology is used to ensure authorized software is used within an organization? ()

During which phase of the incident response process would be most appropriate to implement long-term fixes to prevent similar incidents in the future?

What is the PRIMARY purpose of a firewall?

Which of the following is a primary objective of implementing physical access controls in an organization?

What is the cloud computing model where customers share computing infrastructure without knowing each other's identity?

Alice and Bob are good friends and want to exchange messages securely. Alice receives a message from Bob. What key does Alice use to decrypt the encrypted message she received?

Which is the second phase of the data handling life cycle?

What is the situation that occurs when a user accumulates system privileges that exceed the requirements of the user's job?

What is the primary purpose of using a mantrap in physical access control?

What security principle can help detect fraudulent behavior, such as employees transferring funds to their personal accounts?

What does the acronym APT stand for?

Which of the following is a definition of phishing?

Which of the following is an example of collusion?

In a network environment, which of the following is an example of a security control?

To protect sensitive information, when is sanitization or destruction required?

In a data center, what is NOT a typical issue related to airflow?

What is the European Union's General Data Protection Regulation (GDPR)?

A vulnerability is ...

Non-repudiation is ...:

Data remanence is known as:

What is an endpoint in a network?

What is Role-based Access Control (RBAC)?

Which of the following options BEST describes the concept of a network?

What is the primary difference between DAC and MAC?

Who controls access in a Mandatory Access Control (MAC) system?

What does SaaS offer consumers?

Physical access controls are employed to:

What is the recommended temperature range for optimized data center uptime and hardware life?

In change management, what is the purpose of a rollback plan?

What is the difference between a standard and a regulation?

What is the definition of a Risk?

What is privacy?

For a rack in a data center, how many temperature sensors are recommended?

What term describes the activities that must be performed to ensure the incident is properly handled?