Free ISC2 CC Preparation Resources Questions and Answers

Question 1

Which of the following best describes the principle of least privilege?

Accepted Answer

Users should have the minimum level of access necessary to perform their job functions.

Answer

The principle of least privilege dictates that users, programs, or processes should be granted only the minimum necessary permissions or access rights required to perform their legitimate functions. This security best practice minimizes the potential damage from accidental errors, misuse, or malicious attacks by limiting the scope of what an compromised account can do. It reduces the attack surface and enhances overall system security.

Question 2

What is the primary goal of a Business Continuity Plan (BCP)?

Accepted Answer

To maintain critical business functions during and after a disaster.

Answer

The primary goal of a Business Continuity Plan (BCP) is to ensure that an organization can maintain its critical business functions and operations during and after a disruptive event or disaster. This involves identifying essential processes, developing strategies to keep them running, and outlining recovery procedures. A BCP aims to minimize the impact of disruptions, reduce downtime, and facilitate a swift return to normal operations.

Question 3

Which of the following is an example of multifactor authentication (MFA)?

Accepted Answer

Fingerprint and smart card

Answer

Multifactor Authentication (MFA) requires combining two or more distinct authentication factors from different categories to verify a user's identity. A fingerprint represents "something you are" (a biometric factor), while a smart card represents "something you have" (a possession factor). The combination of these two distinct factors makes "Fingerprint and smart card" a clear example of multifactor authentication, providing enhanced security.

Question 4

Which protocol is used to securely transfer files over a network?

Accepted Answer

SFTP

Answer

SFTP, or Secure File Transfer Protocol, is specifically designed for securely transferring files over a network. It uses SSH (Secure Shell) to provide a secure channel, encrypting both the data and commands during transmission. This ensures confidentiality and integrity of the files being moved between systems.

Question 5

What is the primary purpose of a Security Information and Event Management (SIEM) system?

Accepted Answer

To monitor and analyze security events in real-time

Answer

A Security Information and Event Management (SIEM) system's primary function is to collect, aggregate, and analyze security-related data from various sources across an organization's IT infrastructure. It provides real-time monitoring and correlation of security events, allowing for early detection of potential threats and incidents. This helps organizations identify and respond to security breaches more effectively.

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test

Free ISC2 CC Preparation Resources Questions and Answers