ISC2 CC Security Principles 3

Question 1

What is defense in depth?

Accepted Answer

Layering multiple security controls to protect assets

Answer

A single strong security control

Answer

Encrypting data at multiple levels

Answer

Using multiple firewalls in series

Question 2

Which concept refers to ensuring systems and data are accessible when needed?

Accepted Answer

Availability

Answer

Confidentiality

Answer

Integrity

Answer

Authentication

Question 3

What is a security baseline?

Accepted Answer

The minimum acceptable security level for a system

Answer

A record of all security incidents

Answer

The maximum security level achievable

Answer

A list of all vulnerabilities in a system

Question 4

Which of the following best describes the concept of due diligence in security?

Accepted Answer

Taking reasonable care to implement and maintain security controls

Answer

Conducting penetration testing annually

Answer

Encrypting all sensitive data

Answer

Training all employees in cybersecurity

Question 5

What does the term 'asset' mean in information security?

Accepted Answer

Anything of value that needs protection

Answer

Any threat to an organization

Answer

A security control implementation

Answer

A vulnerability scan result

Question 6

Which of the following is the ISC2 Code of Ethics first canon?

Accepted Answer

Protect society, the common good, necessary public trust and confidence, and the infrastructure

Answer

Act honorably, honestly, justly, responsibly, and legally

Answer

Provide diligent and competent service to principals

Answer

Advance and protect the profession