CC COURSE PRE-ASSESSMENT & POST-ASSESSMENT |
QUESTIONS AND ANSWERS | 2026 UPDATE | WITH
COMPLETE SOLUTION
Steve is a security practitioner assigned to come up with a protective measure
for ensuring cars don't collide with pedestrians.
What is probably the most effective type of control for this task?
A. Administrative
B. Nuanced
C. Physical
D. Technical Answer - C. Physical
Chad is a security practitioner tasked with ensuring that the information on the
organization's public website is not changed by anyone outside the
organization.
This task is an example of ensuring _________.
A. Availability
B. Confirmation
C. Confidentiality
D. Integrity Answer - D. Integrity
Which of the following is an example of a "Something you know"
authentication factor?
A. Fingerprint
,B. Iris scan
C. Password
D. User ID Answer - C. Password
Which of the following is an example of a "Something you are" authentication
factor?
A. A photograph of your face
B. A credit card presented to a cash machine
C. A user ID
D. Your password and PIN Answer - A. A photograph of your face
A system that collects transactional information and stores it in a record in
order to show which users performed which actions is an example of providing
________.
A. Multifactor authentication
B. Biometrics
C. Non-repudiation
D. Privacy Answer - C. Non-repudiation
What is the European Union (EU) law that grants legal protections to individual
human privacy?
A. The Magna Carta
B. The Privacy Human Rights Act
C. The General Data Protection Regulation
D. The Constitution Answer - C. The General Data Protection Regulation
For which of the following systems would the security concept of availability
probably be most important?
,A. Online streaming of camera feeds that display historical works of art in
museums around the world
B. Medical systems that monitor patient condition in an intensive-care unit
C. Retail records of past transactions
D. Medical systems that store patient data Answer - B. Medical systems that
monitor patient condition in an intensive-care unit
For which of the following assets is integrity probably the most important
security aspect?
A. The file that contains passwords used to authenticate users
B. The color scheme of a marketing website
C. Software that checks the spelling of product descriptions for a retail website
D. One frame of a streaming video Answer - A. The file that contains passwords
used to authenticate users
Fill in the missing word:
In risk management concepts, a(n) _________ is something a security
practitioner might need to protect.
A. Asset
B. Likelihood
C. Vulnerability
D. Threat Answer - A. Asset
Fill in the missing word:
In risk management concepts, a(n) ___________ is something or someone that
poses risk to an organization or asset.
, A. Threat
B. Control
C. Fear
D. Asset Answer - A. Threat
Of the following, which would probably not be considered a threat?
A. Unintentional damage to the system caused by a user
B. Natural disaster
C. An external attacker trying to gain unauthorized access to the environment
D. A laptop with sensitive data on it Answer - D. A laptop with sensitive data on
it
Which of the following probably poses the most risk?
You can select one or more answers.
A. A high-likelihood, high-impact event
B. A low-likelihood, high-impact event
C. A low-likelihood, low-impact event
D. A high-likelihood, low-impact event Answer - A. A high-likelihood, high-
impact event
Within the organization, who can identify risk?
A. The security manager
B. Senior management
C. Anyone
D. Any security team member Answer - C. Anyone
QUESTIONS AND ANSWERS | 2026 UPDATE | WITH
COMPLETE SOLUTION
Steve is a security practitioner assigned to come up with a protective measure
for ensuring cars don't collide with pedestrians.
What is probably the most effective type of control for this task?
A. Administrative
B. Nuanced
C. Physical
D. Technical Answer - C. Physical
Chad is a security practitioner tasked with ensuring that the information on the
organization's public website is not changed by anyone outside the
organization.
This task is an example of ensuring _________.
A. Availability
B. Confirmation
C. Confidentiality
D. Integrity Answer - D. Integrity
Which of the following is an example of a "Something you know"
authentication factor?
A. Fingerprint
,B. Iris scan
C. Password
D. User ID Answer - C. Password
Which of the following is an example of a "Something you are" authentication
factor?
A. A photograph of your face
B. A credit card presented to a cash machine
C. A user ID
D. Your password and PIN Answer - A. A photograph of your face
A system that collects transactional information and stores it in a record in
order to show which users performed which actions is an example of providing
________.
A. Multifactor authentication
B. Biometrics
C. Non-repudiation
D. Privacy Answer - C. Non-repudiation
What is the European Union (EU) law that grants legal protections to individual
human privacy?
A. The Magna Carta
B. The Privacy Human Rights Act
C. The General Data Protection Regulation
D. The Constitution Answer - C. The General Data Protection Regulation
For which of the following systems would the security concept of availability
probably be most important?
,A. Online streaming of camera feeds that display historical works of art in
museums around the world
B. Medical systems that monitor patient condition in an intensive-care unit
C. Retail records of past transactions
D. Medical systems that store patient data Answer - B. Medical systems that
monitor patient condition in an intensive-care unit
For which of the following assets is integrity probably the most important
security aspect?
A. The file that contains passwords used to authenticate users
B. The color scheme of a marketing website
C. Software that checks the spelling of product descriptions for a retail website
D. One frame of a streaming video Answer - A. The file that contains passwords
used to authenticate users
Fill in the missing word:
In risk management concepts, a(n) _________ is something a security
practitioner might need to protect.
A. Asset
B. Likelihood
C. Vulnerability
D. Threat Answer - A. Asset
Fill in the missing word:
In risk management concepts, a(n) ___________ is something or someone that
poses risk to an organization or asset.
, A. Threat
B. Control
C. Fear
D. Asset Answer - A. Threat
Of the following, which would probably not be considered a threat?
A. Unintentional damage to the system caused by a user
B. Natural disaster
C. An external attacker trying to gain unauthorized access to the environment
D. A laptop with sensitive data on it Answer - D. A laptop with sensitive data on
it
Which of the following probably poses the most risk?
You can select one or more answers.
A. A high-likelihood, high-impact event
B. A low-likelihood, high-impact event
C. A low-likelihood, low-impact event
D. A high-likelihood, low-impact event Answer - A. A high-likelihood, high-
impact event
Within the organization, who can identify risk?
A. The security manager
B. Senior management
C. Anyone
D. Any security team member Answer - C. Anyone
