Practice Test GeeksISC2 CC - ISC2 Certified in Cybersecurity Practice Test
← All ISC2 CC Flashcard Decks

Security Operations Flashcards

6 cards from real ISC2 CC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Security Operations flashcards as text

  1. What is the purpose of security awareness training?

    Answer: To help employees recognize and respond appropriately to security threats

    Security awareness training educates employees about security threats, policies, and proper security behavior to reduce human-related security risks.

  2. What is data at rest?

    Answer: Data stored on physical media or storage devices

    Data at rest refers to inactive data stored on drives, databases, or other storage media, as opposed to data being transmitted or processed.

  3. What is the purpose of a clean desk policy?

    Answer: Ensuring sensitive information is not left visible or unattended at workstations

    A clean desk policy requires employees to secure sensitive documents and information at the end of work sessions to prevent unauthorized access.

  4. What does change management in security ensure?

    Answer: That changes to systems are reviewed, approved, and documented before implementation

    Change management ensures that modifications to systems and configurations are properly reviewed, approved, and documented to minimize security and operational risks.

  5. What is vulnerability scanning?

    Answer: Automated identification of known security weaknesses in systems and applications

    Vulnerability scanning uses automated tools to identify known security weaknesses in systems, applications, and network devices.

  6. What is the 3-2-1 backup rule?

    Answer: Keep 3 copies of data on 2 different media types with 1 copy stored off-site

    The 3-2-1 backup rule recommends keeping 3 copies of data, on 2 different types of storage media, with 1 copy stored off-site.