Free ISC2 CC Recertification Questions and Answers

Question 1

Which of the following best describes the principle of "least privilege"?

Accepted Answer

Granting users only the permissions they need to perform their job functions.

Answer

Ensuring all users have administrative access to systems.

Answer

Allowing access to resources based on user requests.

Answer

Providing users with maximum permissions to ensure productivity

Question 2

What is the primary purpose of a Business Continuity Plan (BCP)?

Accepted Answer

To ensue that critical business functions continue during and after a disaster.

Answer

To outline the steps to recover IT systems after a disaster.

Answer

To create a backup of all data in the organization.

Answer

To identify and mitigate security security vulnerabilities in the network.

Question 3

Which of the following is an example of a physical security control?

Accepted Answer

Biometric access controls.

Answer

Encryption of sensitive data

Answer

Implementation of firewalls.

Answer

User access reviews.

Question 4

What is the primary goal of an Incident Response Plan (IRP)

Accepted Answer

To ensure that the organization can quickly respond to and recover from security incidents.

Answer

To eliminate all vulnerabilities in the organization

Answer

To conduct regular security audits.

Answer

To provide training to employees on security awareness.

Question 5

Which of the following describes a Distributed Denial of Service (DDoS) attack?

Accepted Answer

An attack where multiple compromised systems are used to target a single system, causing a denial of service.

Answer

An attack where the attacker gains unauthorized access to a single system.

Answer

An attack that involves encrypting a user's data and demanding a ransom for decryption key.

Answer

An attack that involves the theft of sensitive data from a system.