Table of Content
1) Domain 1: General Security Concepts (50 questions)
2) Domain 2: Threats, Vulnerabilities, and Mitigations (50
questions)
3) Domain 4: Security Operations (50 questions)
4) Domain 5: Security Program Management and Oversight
(50 questions)
5) Partial Practice Exam (60 questions)
Terms in this set (325)
Quiz____?
In a corporate office, employees are required to use their access cards to enter different
sections of the building. What type of control is being implemented in this scenario?
Detective control
Preventive control
Physical control
Corrective control -
Answer✓✓
1
,Physical control
- The use of access cards to enter different sections of the building is an example of physical
control, as it restricts and controls physical access to specific areas.
Quiz____?
Detective controls -
Answer✓✓
Help to identify and respond to security incidents after they have occurred.
- ex. security cameras
Quiz____?
Preventive controls -
Answer✓✓
Aim to stop security incidents before they occur.
Quiz____?
Corrective controls -
Answer✓✓
Implemented in response to identified security incidents.
2
, Quiz____?
A financial institution implements encryption for all sensitive data transmitted between its
branches to ensure confidentiality. What type of control is being applied here?
Technical control
Administrative control
Physical control
Operational control -
Answer✓✓
Technical control
- Encryption is a technical control that involves the use of technology to protect sensitive data
during transmission, ensuring its confidentiality.
Quiz____?
Administrative controls -
Answer✓✓
involve policies, procedures, and training to shape behavior.
Quiz____?
Physical controls -
3
, Answer✓✓
Restrict access to physical areas and assets.
Quiz____?
Operational control -
Answer✓✓
Focus on day-to-day processes and procedures to ensure the security of information systems.
Quiz____?
A company encrypts sensitive customer data to prevent unauthorized access. What security
principle does this primarily address?
Confidentiality
Integrity
Availability
Accountability -
Answer✓✓
Confidentiality
- Encrypting sensitive customer data helps maintain confidentiality by protecting it from
unauthorized access.
4
1) Domain 1: General Security Concepts (50 questions)
2) Domain 2: Threats, Vulnerabilities, and Mitigations (50
questions)
3) Domain 4: Security Operations (50 questions)
4) Domain 5: Security Program Management and Oversight
(50 questions)
5) Partial Practice Exam (60 questions)
Terms in this set (325)
Quiz____?
In a corporate office, employees are required to use their access cards to enter different
sections of the building. What type of control is being implemented in this scenario?
Detective control
Preventive control
Physical control
Corrective control -
Answer✓✓
1
,Physical control
- The use of access cards to enter different sections of the building is an example of physical
control, as it restricts and controls physical access to specific areas.
Quiz____?
Detective controls -
Answer✓✓
Help to identify and respond to security incidents after they have occurred.
- ex. security cameras
Quiz____?
Preventive controls -
Answer✓✓
Aim to stop security incidents before they occur.
Quiz____?
Corrective controls -
Answer✓✓
Implemented in response to identified security incidents.
2
, Quiz____?
A financial institution implements encryption for all sensitive data transmitted between its
branches to ensure confidentiality. What type of control is being applied here?
Technical control
Administrative control
Physical control
Operational control -
Answer✓✓
Technical control
- Encryption is a technical control that involves the use of technology to protect sensitive data
during transmission, ensuring its confidentiality.
Quiz____?
Administrative controls -
Answer✓✓
involve policies, procedures, and training to shape behavior.
Quiz____?
Physical controls -
3
, Answer✓✓
Restrict access to physical areas and assets.
Quiz____?
Operational control -
Answer✓✓
Focus on day-to-day processes and procedures to ensure the security of information systems.
Quiz____?
A company encrypts sensitive customer data to prevent unauthorized access. What security
principle does this primarily address?
Confidentiality
Integrity
Availability
Accountability -
Answer✓✓
Confidentiality
- Encrypting sensitive customer data helps maintain confidentiality by protecting it from
unauthorized access.
4
