ISC2 CERTIFIED IN CYBERSECURITY (CC)
CERTIFICATION EXAM WITH QUESTIONS
AND VERIFIED ANSWERS, PLUS DETAILED
RATIONALES/EXPERT VERIFIED FOR
GUARANTEED PASS 2026/LATEST
UPDATE/INSTANT DOWNLOAD PDF
Question 1
An organization wants to ensure that employees can access only the files
and applications required for their assigned responsibilities. A new
employee in the finance department should not automatically receive
access to human-resources records, network administration tools, or
executive documents.
Which security principle BEST addresses this requirement?
A. Defense in depth
B. Least privilege
C. Separation of duties
D. Availability
Answer: B. Least privilege
Rationale: Least privilege requires users, processes, and systems to
receive only the minimum access necessary to perform authorized
tasks. This reduces the potential damage caused by accidental misuse,
compromised credentials, or insider threats. Separation of duties is
related but focuses on dividing sensitive responsibilities among
multiple individuals so that no single person has excessive control.
Question 2
1
,A security analyst discovers that an employee's account has successfully
authenticated to a corporate application from Kenya at 9:00 a.m. The
same credentials authenticate from another country several minutes later.
The employee confirms that they have not traveled.
What security issue does this MOST likely indicate?
A. Data classification failure
B. Impossible-travel authentication anomaly
C. Denial-of-service attack
D. Physical security violation
Answer: B. Impossible-travel authentication anomaly
Rationale: An impossible-travel condition occurs when authentication
events indicate that the same account was used from geographically
distant locations within a timeframe that makes legitimate travel
impossible. This can indicate credential theft, session hijacking, or
another form of unauthorized access and should trigger investigation.
Question 3
A company requires employees to prove their identity using a password
and a fingerprint before accessing sensitive systems.
Which security concept is being implemented?
A. Multifactor authentication
B. Single sign-on
C. Role-based access control
D. Federation
Answer: A. Multifactor authentication
Rationale: Multifactor authentication requires authentication factors
from different categories. A password is something the user knows,
2
,while a fingerprint is something the user is. Combining them provides
stronger authentication than relying on a password alone.
Question 4
An employee receives an email appearing to come from the
organization's chief executive officer. The message urgently asks the
employee to purchase gift cards and send the codes to an external email
address.
Which attack technique is MOST clearly represented?
A. Phishing
B. Tailgating
C. Shoulder surfing
D. Dumpster diving
Answer: A. Phishing
Rationale: Phishing uses deceptive communications to manipulate
recipients into revealing information, transferring money, installing
malicious software, or performing another unauthorized action. The
apparent authority of the executive and the urgency of the request are
classic social-engineering indicators.
Question 5
A security team wants to ensure that an attacker who compromises one
workstation cannot easily move to every other workstation on the
corporate network.
Which control BEST supports this objective?
A. Network segmentation
B. Password expiration
3
, C. Data compression
D. File archiving
Answer: A. Network segmentation
Rationale: Network segmentation divides a network into separate
security zones and restricts unnecessary communication between
them. Proper segmentation can limit lateral movement after an
attacker compromises one system. It is particularly useful for
separating user networks, servers, management networks, and
sensitive systems.
Question 6
A company maintains multiple copies of critical business data and stores
one copy at an off-site facility. A fire destroys the primary data center,
but the company restores its data from the off-site copy.
Which security objective is MOST directly supported?
A. Confidentiality
B. Integrity
C. Availability
D. Non-repudiation
Answer: C. Availability
Rationale: Availability means that authorized users can access systems
and information when required. Backups, redundant systems,
alternate facilities, and disaster-recovery procedures help
organizations continue operating after failures or disasters.
Question 7
4
CERTIFICATION EXAM WITH QUESTIONS
AND VERIFIED ANSWERS, PLUS DETAILED
RATIONALES/EXPERT VERIFIED FOR
GUARANTEED PASS 2026/LATEST
UPDATE/INSTANT DOWNLOAD PDF
Question 1
An organization wants to ensure that employees can access only the files
and applications required for their assigned responsibilities. A new
employee in the finance department should not automatically receive
access to human-resources records, network administration tools, or
executive documents.
Which security principle BEST addresses this requirement?
A. Defense in depth
B. Least privilege
C. Separation of duties
D. Availability
Answer: B. Least privilege
Rationale: Least privilege requires users, processes, and systems to
receive only the minimum access necessary to perform authorized
tasks. This reduces the potential damage caused by accidental misuse,
compromised credentials, or insider threats. Separation of duties is
related but focuses on dividing sensitive responsibilities among
multiple individuals so that no single person has excessive control.
Question 2
1
,A security analyst discovers that an employee's account has successfully
authenticated to a corporate application from Kenya at 9:00 a.m. The
same credentials authenticate from another country several minutes later.
The employee confirms that they have not traveled.
What security issue does this MOST likely indicate?
A. Data classification failure
B. Impossible-travel authentication anomaly
C. Denial-of-service attack
D. Physical security violation
Answer: B. Impossible-travel authentication anomaly
Rationale: An impossible-travel condition occurs when authentication
events indicate that the same account was used from geographically
distant locations within a timeframe that makes legitimate travel
impossible. This can indicate credential theft, session hijacking, or
another form of unauthorized access and should trigger investigation.
Question 3
A company requires employees to prove their identity using a password
and a fingerprint before accessing sensitive systems.
Which security concept is being implemented?
A. Multifactor authentication
B. Single sign-on
C. Role-based access control
D. Federation
Answer: A. Multifactor authentication
Rationale: Multifactor authentication requires authentication factors
from different categories. A password is something the user knows,
2
,while a fingerprint is something the user is. Combining them provides
stronger authentication than relying on a password alone.
Question 4
An employee receives an email appearing to come from the
organization's chief executive officer. The message urgently asks the
employee to purchase gift cards and send the codes to an external email
address.
Which attack technique is MOST clearly represented?
A. Phishing
B. Tailgating
C. Shoulder surfing
D. Dumpster diving
Answer: A. Phishing
Rationale: Phishing uses deceptive communications to manipulate
recipients into revealing information, transferring money, installing
malicious software, or performing another unauthorized action. The
apparent authority of the executive and the urgency of the request are
classic social-engineering indicators.
Question 5
A security team wants to ensure that an attacker who compromises one
workstation cannot easily move to every other workstation on the
corporate network.
Which control BEST supports this objective?
A. Network segmentation
B. Password expiration
3
, C. Data compression
D. File archiving
Answer: A. Network segmentation
Rationale: Network segmentation divides a network into separate
security zones and restricts unnecessary communication between
them. Proper segmentation can limit lateral movement after an
attacker compromises one system. It is particularly useful for
separating user networks, servers, management networks, and
sensitive systems.
Question 6
A company maintains multiple copies of critical business data and stores
one copy at an off-site facility. A fire destroys the primary data center,
but the company restores its data from the off-site copy.
Which security objective is MOST directly supported?
A. Confidentiality
B. Integrity
C. Availability
D. Non-repudiation
Answer: C. Availability
Rationale: Availability means that authorized users can access systems
and information when required. Backups, redundant systems,
alternate facilities, and disaster-recovery procedures help
organizations continue operating after failures or disasters.
Question 7
4
