CC COURSE PRE-ASSESSMENT & POST-ASSESSMENT EXAM QUESTIONS ANSWERED CORRECTLY
LATEST UPDATE 2026
C. Physical - Answers Steve is a security practitioner assigned to come up with a protective measure
for ensuring cars don't collide with pedestrians.
What is probably the most effective type of control for this task?
A. Administrative
B. Nuanced
C. Physical
D. Technical
D. Integrity - Answers Chad is a security practitioner tasked with ensuring that the information on the
organization's public website is not changed by anyone outside the organization.
This task is an example of ensuring _________.
A. Availability
B. Confirmation
C. Confidentiality
D. Integrity
C. Password - Answers Which of the following is an example of a "Something you know"
authentication factor?
A. Fingerprint
B. Iris scan
C. Password
D. User ID
A. A photograph of your face - Answers Which of the following is an example of a "Something you
are" authentication factor?
A. A photograph of your face
B. A credit card presented to a cash machine
C. A user ID
D. Your password and PIN
C. Non-repudiation - Answers A system that collects transactional information and stores it in a record
in order to show which users performed which actions is an example of providing ________.
A. Multifactor authentication
B. Biometrics
C. Non-repudiation
D. Privacy
C. The General Data Protection Regulation - Answers What is the European Union (EU) law that grants
legal protections to individual human privacy?
A. The Magna Carta
B. The Privacy Human Rights Act
C. The General Data Protection Regulation
D. The Constitution
B. Medical systems that monitor patient condition in an intensive-care unit - Answers For which of the
following systems would the security concept of availability probably be most important?
A. Online streaming of camera feeds that display historical works of art in museums around the world
B. Medical systems that monitor patient condition in an intensive-care unit
C. Retail records of past transactions
D. Medical systems that store patient data
A. The file that contains passwords used to authenticate users - Answers For which of the following
assets is integrity probably the most important security aspect?
A. The file that contains passwords used to authenticate users
B. The color scheme of a marketing website
C. Software that checks the spelling of product descriptions for a retail website
D. One frame of a streaming video
A. Asset - Answers Fill in the missing word:
In risk management concepts, a(n) _________ is something a security practitioner might need to
protect.
, A. Asset
B. Likelihood
C. Vulnerability
D. Threat
A. Threat - Answers Fill in the missing word:
In risk management concepts, a(n) ___________ is something or someone that poses risk to an
organization or asset.
A. Threat
B. Control
C. Fear
D. Asset
D. A laptop with sensitive data on it - Answers Of the following, which would probably not be
considered a threat?
A. Unintentional damage to the system caused by a user
B. Natural disaster
C. An external attacker trying to gain unauthorized access to the environment
D. A laptop with sensitive data on it
A. A high-likelihood, high-impact event - Answers Which of the following probably poses the most
risk?
You can select one or more answers.
A. A high-likelihood, high-impact event
B. A low-likelihood, high-impact event
C. A low-likelihood, low-impact event
D. A high-likelihood, low-impact event
C. Anyone - Answers Within the organization, who can identify risk?
A. The security manager
B. Senior management
C. Anyone
D. Any security team member
B. Mitigation - Answers Kerpak works in the security office of a medium-sized entertainment
company. Kerpak is asked to assess a particular threat, and he suggests that the best way to counter
this threat would be to purchase and implement a particular security solution.
This is an example of _______.
A. Avoidance
B. Mitigation
C. Acceptance
D. Transference
C. Acceptance - Answers Fill in the missing word:
Sophia is visiting Las Vegas and decides to put a bet on a particular number on a roulette wheel.
This is an example of _________.
A. Avoidance
B. Mitigation
C. Acceptance
D. Transference
D. Risk tolerance - Answers Phrenal is selling a used laptop in an online auction. Phrenal has estimated
the value of the laptop to be $100, but has seen other laptops of similar type and quality sell for both
more and less than that amount. Phrenal hopes that the laptop will sell for $100 or more, but is
prepared to take less for it if nobody bids that amount.
This is an example of ___________.
A. Risk inversion
B. Threat
C. Vulnerability
D. Risk tolerance
C. Technical - Answers A software firewall is an application that runs on a device and prevents specific
types of traffic from entering that device.
LATEST UPDATE 2026
C. Physical - Answers Steve is a security practitioner assigned to come up with a protective measure
for ensuring cars don't collide with pedestrians.
What is probably the most effective type of control for this task?
A. Administrative
B. Nuanced
C. Physical
D. Technical
D. Integrity - Answers Chad is a security practitioner tasked with ensuring that the information on the
organization's public website is not changed by anyone outside the organization.
This task is an example of ensuring _________.
A. Availability
B. Confirmation
C. Confidentiality
D. Integrity
C. Password - Answers Which of the following is an example of a "Something you know"
authentication factor?
A. Fingerprint
B. Iris scan
C. Password
D. User ID
A. A photograph of your face - Answers Which of the following is an example of a "Something you
are" authentication factor?
A. A photograph of your face
B. A credit card presented to a cash machine
C. A user ID
D. Your password and PIN
C. Non-repudiation - Answers A system that collects transactional information and stores it in a record
in order to show which users performed which actions is an example of providing ________.
A. Multifactor authentication
B. Biometrics
C. Non-repudiation
D. Privacy
C. The General Data Protection Regulation - Answers What is the European Union (EU) law that grants
legal protections to individual human privacy?
A. The Magna Carta
B. The Privacy Human Rights Act
C. The General Data Protection Regulation
D. The Constitution
B. Medical systems that monitor patient condition in an intensive-care unit - Answers For which of the
following systems would the security concept of availability probably be most important?
A. Online streaming of camera feeds that display historical works of art in museums around the world
B. Medical systems that monitor patient condition in an intensive-care unit
C. Retail records of past transactions
D. Medical systems that store patient data
A. The file that contains passwords used to authenticate users - Answers For which of the following
assets is integrity probably the most important security aspect?
A. The file that contains passwords used to authenticate users
B. The color scheme of a marketing website
C. Software that checks the spelling of product descriptions for a retail website
D. One frame of a streaming video
A. Asset - Answers Fill in the missing word:
In risk management concepts, a(n) _________ is something a security practitioner might need to
protect.
, A. Asset
B. Likelihood
C. Vulnerability
D. Threat
A. Threat - Answers Fill in the missing word:
In risk management concepts, a(n) ___________ is something or someone that poses risk to an
organization or asset.
A. Threat
B. Control
C. Fear
D. Asset
D. A laptop with sensitive data on it - Answers Of the following, which would probably not be
considered a threat?
A. Unintentional damage to the system caused by a user
B. Natural disaster
C. An external attacker trying to gain unauthorized access to the environment
D. A laptop with sensitive data on it
A. A high-likelihood, high-impact event - Answers Which of the following probably poses the most
risk?
You can select one or more answers.
A. A high-likelihood, high-impact event
B. A low-likelihood, high-impact event
C. A low-likelihood, low-impact event
D. A high-likelihood, low-impact event
C. Anyone - Answers Within the organization, who can identify risk?
A. The security manager
B. Senior management
C. Anyone
D. Any security team member
B. Mitigation - Answers Kerpak works in the security office of a medium-sized entertainment
company. Kerpak is asked to assess a particular threat, and he suggests that the best way to counter
this threat would be to purchase and implement a particular security solution.
This is an example of _______.
A. Avoidance
B. Mitigation
C. Acceptance
D. Transference
C. Acceptance - Answers Fill in the missing word:
Sophia is visiting Las Vegas and decides to put a bet on a particular number on a roulette wheel.
This is an example of _________.
A. Avoidance
B. Mitigation
C. Acceptance
D. Transference
D. Risk tolerance - Answers Phrenal is selling a used laptop in an online auction. Phrenal has estimated
the value of the laptop to be $100, but has seen other laptops of similar type and quality sell for both
more and less than that amount. Phrenal hopes that the laptop will sell for $100 or more, but is
prepared to take less for it if nobody bids that amount.
This is an example of ___________.
A. Risk inversion
B. Threat
C. Vulnerability
D. Risk tolerance
C. Technical - Answers A software firewall is an application that runs on a device and prevents specific
types of traffic from entering that device.
