ISC2 CC Security Operations 2

Question 1

What is the purpose of security awareness training?

Accepted Answer

To help employees recognize and respond appropriately to security threats

Answer

Security awareness training educates employees about security threats, policies, and proper security behavior to reduce human-related security risks.

Question 2

What is data at rest?

Accepted Answer

Data stored on physical media or storage devices

Answer

Data at rest refers to inactive data stored on drives, databases, or other storage media, as opposed to data being transmitted or processed.

Question 3

What is the purpose of a clean desk policy?

Accepted Answer

Ensuring sensitive information is not left visible or unattended at workstations

Answer

A clean desk policy requires employees to secure sensitive documents and information at the end of work sessions to prevent unauthorized access.

Question 4

What does change management in security ensure?

Accepted Answer

That changes to systems are reviewed, approved, and documented before implementation

Answer

Change management ensures that modifications to systems and configurations are properly reviewed, approved, and documented to minimize security and operational risks.

Question 5

What is vulnerability scanning?

Accepted Answer

Automated identification of known security weaknesses in systems and applications

Answer

Vulnerability scanning uses automated tools to identify known security weaknesses in systems, applications, and network devices.

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test

ISC2 CC Security Operations 2