ISC2 CC Security Principles

Question 1

What does the CIA triad stand for in information security?

Accepted Answer

Confidentiality, Integrity, Availability

Answer

Control, Identity, Access

Answer

Compliance, Implementation, Assurance

Answer

Centralization, Integration, Authorization

Question 2

Which concept ensures that information is accessible only to authorized individuals?

Accepted Answer

Confidentiality

Answer

Integrity

Answer

Availability

Answer

Non-repudiation

Question 3

What is the primary goal of integrity in information security?

Accepted Answer

Preventing unauthorized data modification

Answer

Ensuring data is always available

Answer

Encrypting data at rest

Answer

Controlling user access

Question 4

Which term describes the process of identifying potential threats and their likelihood?

Accepted Answer

Risk analysis

Answer

Vulnerability assessment

Answer

Penetration testing

Answer

Security audit

Question 5

What is a vulnerability in security terms?

Accepted Answer

A weakness that can be exploited

Answer

A realized attack on a system

Answer

A security control that failed

Answer

A threat actor targeting a system

Question 6

Which of the following best describes non-repudiation?

Accepted Answer

Ensuring a sender cannot deny sending a message

Answer

Ensuring data is not modified

Answer

Proving a user's identity

Answer

Preventing unauthorized access