Free ISC2 CC Certification Domains Questions and Answers — Questions and Answers

Question 1: Which of the following is NOT a component of CIA triad?

Confidentiality
Integrity
Availability
Authentication (Correct answer)

Correct answer: Authentication

The CIA triad is a foundational model in information security, representing three core principles: Confidentiality, Integrity, and Availability. Confidentiality ensures data privacy, Integrity ensures data accuracy and trustworthiness, and Availability ensures systems and data are accessible when needed. Authentication is a mechanism used to enforce these principles, particularly confidentiality and integrity, but it is not one of the three core principles itself.

Question 2: What is the purpose of a Business Continuity Plan (BCP)?

To ensure IT systems are patched
To maintain operations during a disruptive event (Correct answer)
To mange user access
To encrypt sensitive data

Correct answer: To maintain operations during a disruptive event

A Business Continuity Plan (BCP) is a comprehensive strategy designed to ensure that an organization can continue to operate its critical functions during and after a disruptive event, such as a natural disaster, cyberattack, or system failure. Its primary purpose is to minimize downtime and financial losses by outlining procedures, resources, and responsibilities for maintaining essential business operations. It focuses on organizational resilience rather than just IT systems.

Question 3: Which of the following is an example of multifactor authentication (MFA)?

Password and PIN
Password and security question
Password and fingerprint (Correct answer)
Password and username

Correct answer: Password and fingerprint

Multifactor Authentication (MFA) requires a user to provide two or more distinct forms of verification from different categories to gain access to a system or account. These categories typically include something you know (like a password), something you have (like a smart card or phone), and something you are (like a fingerprint or biometric). A password and fingerprint combine "something you know" with "something you are," making it a valid MFA example.

Question 4: What is the primary purpose of a firewall in network security?

To monitor employee activity
To block all incoming traffic
To prevent unauthorized access to network resources (Correct answer)
To encrypt data in transit

Correct answer: To prevent unauthorized access to network resources

A firewall acts as a security barrier, monitoring and controlling incoming and outgoing network traffic based on predefined security rules. Its primary purpose is to prevent unauthorized access to private network resources by filtering out malicious or suspicious data packets. By enforcing these rules, firewalls protect networks from various cyber threats and ensure only legitimate traffic can pass through.

Question 5: What is a key activity in vulnerability management?

Implementing firewalls
Scanning for vulnerabilities (Correct answer)
Training employees
Monitoring network traffic

Correct answer: Scanning for vulnerabilities

Vulnerability management is a continuous process of identifying, assessing, prioritizing, and remediating security weaknesses in systems and applications. A key activity in this process is regularly scanning for vulnerabilities, which involves using specialized tools to detect known security flaws and misconfigurations. This proactive identification is crucial for understanding an organization's attack surface and implementing timely patches or fixes.

Free ISC2 CC Certification Domains Questions and Answers

Which of the following is NOT a component of CIA triad?