Free ISC2 CC Preparation Resources Questions and Answers — Questions and Answers
Question 1: Which of the following best describes the principle of least privilege?
- Users should have the minimum level of access necessary to perform their job functions. (Correct answer)
- Access should be granted based on the user's seniority.
- Users should have access to all systems to ensure operational efficiency.
- Access should be denied to users unless explicitly allowed by their manager
Correct answer: Users should have the minimum level of access necessary to perform their job functions.
The principle of least privilege dictates that users, programs, or processes should be granted only the minimum necessary permissions or access rights required to perform their legitimate functions. This security best practice minimizes the potential damage from accidental errors, misuse, or malicious attacks by limiting the scope of what an compromised account can do. It reduces the attack surface and enhances overall system security.
Question 2: What is the primary goal of a Business Continuity Plan (BCP)?
- To ensure that all data is backed up daily.
- To maintain critical business functions during and after a disaster. (Correct answer)
- To prevent any form of cyber attack.
- To ensure that all employees are trained in cybersecurity practices.
Correct answer: To maintain critical business functions during and after a disaster.
The primary goal of a Business Continuity Plan (BCP) is to ensure that an organization can maintain its critical business functions and operations during and after a disruptive event or disaster. This involves identifying essential processes, developing strategies to keep them running, and outlining recovery procedures. A BCP aims to minimize the impact of disruptions, reduce downtime, and facilitate a swift return to normal operations.
Question 3: Which of the following is an example of multifactor authentication (MFA)?
- Username and password
- Fingerprint and smart card (Correct answer)
- Password and security question
- OIN and username
Correct answer: Fingerprint and smart card
Multifactor Authentication (MFA) requires combining two or more distinct authentication factors from different categories to verify a user's identity. A fingerprint represents "something you are" (a biometric factor), while a smart card represents "something you have" (a possession factor). The combination of these two distinct factors makes "Fingerprint and smart card" a clear example of multifactor authentication, providing enhanced security.
Question 4: Which protocol is used to securely transfer files over a network?
- FTP
- HTTP
- SFTP (Correct answer)
- SMTP
Correct answer: SFTP
SFTP, or Secure File Transfer Protocol, is specifically designed for securely transferring files over a network. It uses SSH (Secure Shell) to provide a secure channel, encrypting both the data and commands during transmission. This ensures confidentiality and integrity of the files being moved between systems.
Question 5: What is the primary purpose of a Security Information and Event Management (SIEM) system?
- To encrypt all data on the network
- To monitor and analyze security events in real-time (Correct answer)
- To perform regular backups of critical data
- To manage user access controls
Correct answer: To monitor and analyze security events in real-time
A Security Information and Event Management (SIEM) system's primary function is to collect, aggregate, and analyze security-related data from various sources across an organization's IT infrastructure. It provides real-time monitoring and correlation of security events, allowing for early detection of potential threats and incidents. This helps organizations identify and respond to security breaches more effectively.
Free ISC2 CC Preparation Resources Questions and Answers
Which of the following best describes the principle of least privilege?