ISC2 CC (CERTIFIED IN
CYBERSECURITY) PRACTICE
QUESTIONS : CERTIFICATION
SUCCESS - UNOFFICIAL BY
CERTIFICATION TERMINAL (PART 1)
EXAM PREP WITH COMPLETE 140
REAL EXAM QUESTION AND
CORRECT DETAILED ANSWERS
(VERIFIED ANSWERS) ALREADY
GRADED A+ (MOST RECENT!!)
4.1mInmthemrealmmofminformationmsecurity,mwhatmconstitutesmthemutmostmcrucialmelementmofmpriv
acy?
A.mProtectingmpersonalminformationmfrommunauthorizedmaccessmormdisclosure
B.mEnsuringmdatamismaccuratemandmunchanged
C.mMakingmsuremdatamismalwaysmaccessiblemwhenmneeded
D.mAllmofmthemabovem-
mCORRECTmANSWERmA.mProtectingmpersonalminformationmfrommunauthorizedmaccessmormdisclosur
e
4.2mChoosemthemBESTmexamplemformampreventivemcontrolmfrommthemfollowing:
A.mAmfirewall
B.mAmbackupmgenerator
C.mAnmintrusionmdetectionmsystem
D.mAnmantivirusmsoftwarem-mCORRECTmANSWERmA.mAmfirewall
,4.3mWhatmdistinguishesmamprivatemcloudmfrommampublicmcloud?
A.mAmpublicmcloudmismlessmsecuremthanmamprivatemcloud
B.mAmprivatemcloudmismmoremexpensivemthanmampublicmcloud
C.mAmpublicmcloudmismhostedmbymamthird-
partymprovider,mwhilemamprivatemcloudmismdedicatedmtomamsinglemorganization
D.mAmprivatemcloudmismonlymaccessiblemfrommamsinglemlocationm-
mCORRECTmANSWERmC.mAmpublicmcloudmismhostedmbymamthird-
partymprovider,mwhilemamprivatemcloudmismdedicatedmtomamsinglemorganization
4.4mWhatmsecuritymprinciplemassertsmthatmamusermshouldmpossessmonlymthemrequisitempermissionsm
tomperformmamtask?
A.mSeparationmofmDuties
B.mDefenseminmDepth
C.mLeastmPrivilege
D.mPrivilegedmAccountsm-mCORRECTmANSWERmC.mLeastmPrivilege
4.5mWhatmismthemobjectivemofmimplementingmamsecuritymawarenessmandmtrainingminitiative?
A.mTomdevelopmtechnicalmspecificationsmformsecuritymcontrols
B.mTomeducatememployeesmaboutmsecuritympoliciesmandmprocedures
C.mTominvestigatemandmrespondmtomsecuritymincidents
D.mTomenforcemdisciplinarymactionsmformsecuritymviolationsm-
mCORRECTmANSWERmB.mTomeducatememployeesmaboutmsecuritympoliciesmandmprocedures
4.6mInmyourmrolesmasmamcybersecuritymanalyst,myourmsupervisormtasksmyoumwithmproducingmamdocu
mentmthatmdelineatesmthemsequentialmproceduremformsettingmupmfirewallmrulesmwithinmthemorganiz
ation'smnetworkminfrastructure.mWhatmspecificmtypemofmdocumentmaremyoumcreating?
A.mGuideline
B.mPolicy
,C.mProcedure
D.mStandardm-mCORRECTmANSWERmC.mProcedure
4.7mWhatmismthemtermmusedmtomdenotemthemprocessmofmeliminatingmormneutralizingmmaliciousmsoft
warem(malware)mfrommamcomputer?
A.mFirewallmconfiguration
B.mDecryption
C.mEncryption
D.mMalwaremRemovalm-mCORRECTmANSWERmD.mMalwaremRemoval
4.8mWhatmdistinguishesmanmincidentmresponsemplanmfrommamdisastermrecoverymplan?
A.mAnmincidentmresponsemplanmfocusesmonmrecoveringmfrommsecuritymincidents,mwhilemamdisastermr
ecoverymplanmfocusesmonmrecoveringmfrommnaturalmdisasters.
B.mAnmincidentmresponsemplanmfocusesmonmpreventingmsecuritymincidents,mwhilemamdisastermrecov
erymplanmfocusesmonmmitigatingmthemimpactmofmnaturalmdisasters
C.mAnmincidentmresponsemplanmfocusesmonmdetectingmandmrespondingmtomsecuritymincidents,mwhil
emamdisastermrecoverymplanmfocusesmonmrestoringmITmsystemsmandminfrastructure
D.mAnmincidentmresponsemplanmfocusesmonmrestoringmcriticalmsystemsmandmdata,mwhilemamdisasterm
recoverymplanmfocusesmonmrestoringmbusinessmoperations.m-
mCORRECTmANSWERmC.mAnmincidentmresponsemplanmfocusesmonmdetectingmandmrespondingmtomsec
uritymincidents,mwhilemamdisastermrecoverymplanmfocusesmonmrestoringmITmsystemsmandminfrastruct
ure
4.9mWhatmismthemmainmobjectivemofmBusinessmContinuitym(BC)?
A.mTomminimizemexpensesmduringmunexpectedmevents
B.mTommaintainmoperationsmduringmunexpectedmevents
C.mTommaximizemprofitsmduringmunexpectedmevents
D.mTommaintainmthemstatusmquomduringmunexpectedmeventsm-
mCORRECTmANSWERmB.mTommaintainmoperationsmduringmunexpectedmeven
, 4.10mWhichmofmthemoptionsmbelowmismanmexamplemthatmdoesmNOTmrepresentmampossiblemmodelmfo
rmanmIncidentmResponsemTeamm(IRT)?
A.mLeveraged
B.mDedicated
C.mHybrid
D.mPre-existingm-mCORRECTmANSWERmD.mPre-existing
4.11mWhatmismthemobjectivemofmamriskmassessmentmprocedure?
A.mTomassignmriskmprioritiesmtomidentifiedmrisks
B.mTomassessmthempotentialmimpactmofmrisksmonmthemorganization
C.mTomimplementmcontrolsmandmmeasuresmtomreducemormeliminatemrisks
D.mTomprovidemamstructuredmapproachmformconductingmriskmassessmentsm-
mCORRECTmANSWERmD.mTomprovidemamstructuredmapproachmformconductingmriskmassessments
4.12mInmriskmmanagement,mwhatmdoesmthemtermm"impact"mrefermto?
A.mThemactionsmtakenmtomtransfermormmitigatemrisks
B.mConfidentiality
C.mThemseveritymormconsequencesmofmamriskmevent
D.mthempotentialmvulnerabilitiesminmamsystemmormprocess.m-
mCORRECTmANSWERmC.mThemseveritymormconsequencesmofmamriskmevent
4.13mHowmdomyoumdefinemintegrityminmthemcontextmofmInformationmSecurity?
A.mThemmaintenancemofmamknownmconfigurationmandmunexpectedmoperationalmfunctionmasmthemsy
stemmprocessesminformation
B.mThemmaintenancemofmamrandommconfigurationmandmunpredictablemoperationalmfunctionmasmthe
msystemmprocessesminformation
CYBERSECURITY) PRACTICE
QUESTIONS : CERTIFICATION
SUCCESS - UNOFFICIAL BY
CERTIFICATION TERMINAL (PART 1)
EXAM PREP WITH COMPLETE 140
REAL EXAM QUESTION AND
CORRECT DETAILED ANSWERS
(VERIFIED ANSWERS) ALREADY
GRADED A+ (MOST RECENT!!)
4.1mInmthemrealmmofminformationmsecurity,mwhatmconstitutesmthemutmostmcrucialmelementmofmpriv
acy?
A.mProtectingmpersonalminformationmfrommunauthorizedmaccessmormdisclosure
B.mEnsuringmdatamismaccuratemandmunchanged
C.mMakingmsuremdatamismalwaysmaccessiblemwhenmneeded
D.mAllmofmthemabovem-
mCORRECTmANSWERmA.mProtectingmpersonalminformationmfrommunauthorizedmaccessmormdisclosur
e
4.2mChoosemthemBESTmexamplemformampreventivemcontrolmfrommthemfollowing:
A.mAmfirewall
B.mAmbackupmgenerator
C.mAnmintrusionmdetectionmsystem
D.mAnmantivirusmsoftwarem-mCORRECTmANSWERmA.mAmfirewall
,4.3mWhatmdistinguishesmamprivatemcloudmfrommampublicmcloud?
A.mAmpublicmcloudmismlessmsecuremthanmamprivatemcloud
B.mAmprivatemcloudmismmoremexpensivemthanmampublicmcloud
C.mAmpublicmcloudmismhostedmbymamthird-
partymprovider,mwhilemamprivatemcloudmismdedicatedmtomamsinglemorganization
D.mAmprivatemcloudmismonlymaccessiblemfrommamsinglemlocationm-
mCORRECTmANSWERmC.mAmpublicmcloudmismhostedmbymamthird-
partymprovider,mwhilemamprivatemcloudmismdedicatedmtomamsinglemorganization
4.4mWhatmsecuritymprinciplemassertsmthatmamusermshouldmpossessmonlymthemrequisitempermissionsm
tomperformmamtask?
A.mSeparationmofmDuties
B.mDefenseminmDepth
C.mLeastmPrivilege
D.mPrivilegedmAccountsm-mCORRECTmANSWERmC.mLeastmPrivilege
4.5mWhatmismthemobjectivemofmimplementingmamsecuritymawarenessmandmtrainingminitiative?
A.mTomdevelopmtechnicalmspecificationsmformsecuritymcontrols
B.mTomeducatememployeesmaboutmsecuritympoliciesmandmprocedures
C.mTominvestigatemandmrespondmtomsecuritymincidents
D.mTomenforcemdisciplinarymactionsmformsecuritymviolationsm-
mCORRECTmANSWERmB.mTomeducatememployeesmaboutmsecuritympoliciesmandmprocedures
4.6mInmyourmrolesmasmamcybersecuritymanalyst,myourmsupervisormtasksmyoumwithmproducingmamdocu
mentmthatmdelineatesmthemsequentialmproceduremformsettingmupmfirewallmrulesmwithinmthemorganiz
ation'smnetworkminfrastructure.mWhatmspecificmtypemofmdocumentmaremyoumcreating?
A.mGuideline
B.mPolicy
,C.mProcedure
D.mStandardm-mCORRECTmANSWERmC.mProcedure
4.7mWhatmismthemtermmusedmtomdenotemthemprocessmofmeliminatingmormneutralizingmmaliciousmsoft
warem(malware)mfrommamcomputer?
A.mFirewallmconfiguration
B.mDecryption
C.mEncryption
D.mMalwaremRemovalm-mCORRECTmANSWERmD.mMalwaremRemoval
4.8mWhatmdistinguishesmanmincidentmresponsemplanmfrommamdisastermrecoverymplan?
A.mAnmincidentmresponsemplanmfocusesmonmrecoveringmfrommsecuritymincidents,mwhilemamdisastermr
ecoverymplanmfocusesmonmrecoveringmfrommnaturalmdisasters.
B.mAnmincidentmresponsemplanmfocusesmonmpreventingmsecuritymincidents,mwhilemamdisastermrecov
erymplanmfocusesmonmmitigatingmthemimpactmofmnaturalmdisasters
C.mAnmincidentmresponsemplanmfocusesmonmdetectingmandmrespondingmtomsecuritymincidents,mwhil
emamdisastermrecoverymplanmfocusesmonmrestoringmITmsystemsmandminfrastructure
D.mAnmincidentmresponsemplanmfocusesmonmrestoringmcriticalmsystemsmandmdata,mwhilemamdisasterm
recoverymplanmfocusesmonmrestoringmbusinessmoperations.m-
mCORRECTmANSWERmC.mAnmincidentmresponsemplanmfocusesmonmdetectingmandmrespondingmtomsec
uritymincidents,mwhilemamdisastermrecoverymplanmfocusesmonmrestoringmITmsystemsmandminfrastruct
ure
4.9mWhatmismthemmainmobjectivemofmBusinessmContinuitym(BC)?
A.mTomminimizemexpensesmduringmunexpectedmevents
B.mTommaintainmoperationsmduringmunexpectedmevents
C.mTommaximizemprofitsmduringmunexpectedmevents
D.mTommaintainmthemstatusmquomduringmunexpectedmeventsm-
mCORRECTmANSWERmB.mTommaintainmoperationsmduringmunexpectedmeven
, 4.10mWhichmofmthemoptionsmbelowmismanmexamplemthatmdoesmNOTmrepresentmampossiblemmodelmfo
rmanmIncidentmResponsemTeamm(IRT)?
A.mLeveraged
B.mDedicated
C.mHybrid
D.mPre-existingm-mCORRECTmANSWERmD.mPre-existing
4.11mWhatmismthemobjectivemofmamriskmassessmentmprocedure?
A.mTomassignmriskmprioritiesmtomidentifiedmrisks
B.mTomassessmthempotentialmimpactmofmrisksmonmthemorganization
C.mTomimplementmcontrolsmandmmeasuresmtomreducemormeliminatemrisks
D.mTomprovidemamstructuredmapproachmformconductingmriskmassessmentsm-
mCORRECTmANSWERmD.mTomprovidemamstructuredmapproachmformconductingmriskmassessments
4.12mInmriskmmanagement,mwhatmdoesmthemtermm"impact"mrefermto?
A.mThemactionsmtakenmtomtransfermormmitigatemrisks
B.mConfidentiality
C.mThemseveritymormconsequencesmofmamriskmevent
D.mthempotentialmvulnerabilitiesminmamsystemmormprocess.m-
mCORRECTmANSWERmC.mThemseveritymormconsequencesmofmamriskmevent
4.13mHowmdomyoumdefinemintegrityminmthemcontextmofmInformationmSecurity?
A.mThemmaintenancemofmamknownmconfigurationmandmunexpectedmoperationalmfunctionmasmthemsy
stemmprocessesminformation
B.mThemmaintenancemofmamrandommconfigurationmandmunpredictablemoperationalmfunctionmasmthe
msystemmprocessesminformation