ISC2 CC Security Principles 3

Question 1

What is defense in depth?

Accepted Answer

Layering multiple security controls to protect assets

Answer

Defense in depth is a security strategy that uses multiple layers of controls so that if one fails, others still provide protection.

Question 2

Which concept refers to ensuring systems and data are accessible when needed?

Accepted Answer

Availability

Answer

Availability ensures that information systems and data are accessible to authorized users when they need them.

Question 3

What is a security baseline?

Accepted Answer

The minimum acceptable security level for a system

Answer

A security baseline defines the minimum security configuration requirements that all systems must meet.

Question 4

Which of the following best describes the concept of due diligence in security?

Accepted Answer

Taking reasonable care to implement and maintain security controls

Answer

Due diligence in security means taking reasonable steps to identify and address security risks and maintain appropriate protections.

Question 5

What does the term 'asset' mean in information security?

Accepted Answer

Anything of value that needs protection

Answer

An asset is anything of value to an organization — including data, systems, people, and physical resources — that requires protection.

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test