Free ISC2 CC Certification Domains Questions and Answers

Question 1

Which of the following is NOT a component of CIA triad?

Accepted Answer

Authentication

Answer

The CIA triad is a foundational model in information security, representing three core principles: Confidentiality, Integrity, and Availability. Confidentiality ensures data privacy, Integrity ensures data accuracy and trustworthiness, and Availability ensures systems and data are accessible when needed. Authentication is a mechanism used to enforce these principles, particularly confidentiality and integrity, but it is not one of the three core principles itself.

Question 2

What is the purpose of a Business Continuity Plan (BCP)?

Accepted Answer

To maintain operations during a disruptive event

Answer

A Business Continuity Plan (BCP) is a comprehensive strategy designed to ensure that an organization can continue to operate its critical functions during and after a disruptive event, such as a natural disaster, cyberattack, or system failure. Its primary purpose is to minimize downtime and financial losses by outlining procedures, resources, and responsibilities for maintaining essential business operations. It focuses on organizational resilience rather than just IT systems.

Question 3

Which of the following is an example of multifactor authentication (MFA)?

Accepted Answer

Password and fingerprint

Answer

Multifactor Authentication (MFA) requires a user to provide two or more distinct forms of verification from different categories to gain access to a system or account. These categories typically include something you know (like a password), something you have (like a smart card or phone), and something you are (like a fingerprint or biometric). A password and fingerprint combine "something you know" with "something you are," making it a valid MFA example.

Question 4

What is the primary purpose of a firewall in network security?

Accepted Answer

To prevent unauthorized access to network resources

Answer

A firewall acts as a security barrier, monitoring and controlling incoming and outgoing network traffic based on predefined security rules. Its primary purpose is to prevent unauthorized access to private network resources by filtering out malicious or suspicious data packets. By enforcing these rules, firewalls protect networks from various cyber threats and ensure only legitimate traffic can pass through.

Question 5

What is a key activity in vulnerability management?

Accepted Answer

Scanning for vulnerabilities

Answer

Vulnerability management is a continuous process of identifying, assessing, prioritizing, and remediating security weaknesses in systems and applications. A key activity in this process is regularly scanning for vulnerabilities, which involves using specialized tools to detect known security flaws and misconfigurations. This proactive identification is crucial for understanding an organization's attack surface and implementing timely patches or fixes.

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test

Free ISC2 CC Certification Domains Questions and Answers