ISC2 CC Security Principles 2

Question 1

What is the difference between a threat and a risk?

Accepted Answer

A threat is a potential danger; a risk combines threat likelihood and impact

Answer

A threat is a potential danger, while risk is the combination of that threat's likelihood and its potential impact.

Question 2

Which security principle involves verifying that a user is who they claim to be?

Accepted Answer

Authentication

Answer

Authentication is the process of verifying the identity of a user, system, or entity.

Question 3

What does the term 'least privilege' mean in security?

Accepted Answer

Restricting user access to only what is necessary for their job

Answer

Least privilege means users are granted only the minimum permissions necessary to perform their job functions.

Question 4

Which of the following is an example of a physical security control?

Accepted Answer

Security badge reader

Answer

A security badge reader is a physical control that restricts physical access to facilities or areas.

Question 5

What is the purpose of a security policy?

Accepted Answer

To document acceptable use and security requirements

Answer

A security policy documents an organization's rules, requirements, and acceptable use guidelines for information security.

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test