1
COMPUTER SECURITY AND RELIABILITY ISC2 CC
EXAM QUESTIONS
Triffid Corporation A is the correct answer. The process itself is an
has a rule that all administrative control; rules and practices are
employees working administrative. The safe itself is
with sensitive physical, but the question asked specifically
hardcopy documents about process, not the safe, so C is incorrect.
must put the Neither the safe nor the process is part of the
documents into a safe IT environment, so this is not a technical
at the end of the control; D is
workday, where they incorrect. B is incorrect; "tangential" is not a
are locked up until term commonly used to describe a particular
the following type of security control, and is used here only
workday. What kind as a distractor.
of control is the
process of putting the
documents into the
safe? (D1, L1.3.1)
A) Administrative
B) Tangential
C) Physical
D) Technical
,2
A vendor sells a B is correct. This is a set of instructions to
particular perform a particular task, so it is a
operating system (OS).
procedure (several procedures, actually—
In order to deploy
one for each platform). A is incorrect; the
the OS securely on
instructions are not a
different platforms,
governmental mandate. C is incorrect,
the vendor publishes
because the instructions are particular to a
several sets of
specific product, not accepted throughout the
instructions on how to
industry. D is incorrect, because the
install it, depending
instructions are not particular to a given
on which platform
organization.
the customer is using.
This is an example of
a ________ _. (D1,
L1.4.2)
A) Law
B) Proced
ure
C)Stand
ard
D)Policy
,3
The Triffid B is correct. A detailed set of processes used
Corporation by a specific organization is a procedure. A is
publishes a policy that incorrect; the policy is the
states all personnel overarching document that requires the
will act in a manner procedure be created and implemented. C
that protects health is incorrect. The procedure is not
and human safety. recognized and implemented throughout the
The security office is industry; it is used internally. D is incorrect;
tasked with writing a the procedure was created by Triffid
detailed set of Corporation, not a governmental body.
processes on how
employees should
wear protective gear
such as hardhats and
gloves when in
hazardous areas. This
detailed set of
processes is a
_ _ _. (D1, L1.4.1)
A) Policy
B) Proced
ure
C)Stand
ard
D)Law
, 4
Chad is a security B is correct. Preventing unauthorized
practitioner tasked modification is the definition of integrity. A is
with ensuring that incorrect because the website is not meant to
the information on the be secret; it is open to the public. C is
organization's public incorrect because Chad is not tasked with
website is not ensuring the website is accessible, only that
changed by anyone the information on it is not changed. D is
outside the incorrect because "confirmation" is not a
organization. This typical security term, and is used here only
task is an example of as a distractor.
ensuring ______ _.
(D1,
L1.1.1)
A) Confidenti
ality
B)Integrity
C)Availabil
ity
D)Confirm
ation
COMPUTER SECURITY AND RELIABILITY ISC2 CC
EXAM QUESTIONS
Triffid Corporation A is the correct answer. The process itself is an
has a rule that all administrative control; rules and practices are
employees working administrative. The safe itself is
with sensitive physical, but the question asked specifically
hardcopy documents about process, not the safe, so C is incorrect.
must put the Neither the safe nor the process is part of the
documents into a safe IT environment, so this is not a technical
at the end of the control; D is
workday, where they incorrect. B is incorrect; "tangential" is not a
are locked up until term commonly used to describe a particular
the following type of security control, and is used here only
workday. What kind as a distractor.
of control is the
process of putting the
documents into the
safe? (D1, L1.3.1)
A) Administrative
B) Tangential
C) Physical
D) Technical
,2
A vendor sells a B is correct. This is a set of instructions to
particular perform a particular task, so it is a
operating system (OS).
procedure (several procedures, actually—
In order to deploy
one for each platform). A is incorrect; the
the OS securely on
instructions are not a
different platforms,
governmental mandate. C is incorrect,
the vendor publishes
because the instructions are particular to a
several sets of
specific product, not accepted throughout the
instructions on how to
industry. D is incorrect, because the
install it, depending
instructions are not particular to a given
on which platform
organization.
the customer is using.
This is an example of
a ________ _. (D1,
L1.4.2)
A) Law
B) Proced
ure
C)Stand
ard
D)Policy
,3
The Triffid B is correct. A detailed set of processes used
Corporation by a specific organization is a procedure. A is
publishes a policy that incorrect; the policy is the
states all personnel overarching document that requires the
will act in a manner procedure be created and implemented. C
that protects health is incorrect. The procedure is not
and human safety. recognized and implemented throughout the
The security office is industry; it is used internally. D is incorrect;
tasked with writing a the procedure was created by Triffid
detailed set of Corporation, not a governmental body.
processes on how
employees should
wear protective gear
such as hardhats and
gloves when in
hazardous areas. This
detailed set of
processes is a
_ _ _. (D1, L1.4.1)
A) Policy
B) Proced
ure
C)Stand
ard
D)Law
, 4
Chad is a security B is correct. Preventing unauthorized
practitioner tasked modification is the definition of integrity. A is
with ensuring that incorrect because the website is not meant to
the information on the be secret; it is open to the public. C is
organization's public incorrect because Chad is not tasked with
website is not ensuring the website is accessible, only that
changed by anyone the information on it is not changed. D is
outside the incorrect because "confirmation" is not a
organization. This typical security term, and is used here only
task is an example of as a distractor.
ensuring ______ _.
(D1,
L1.1.1)
A) Confidenti
ality
B)Integrity
C)Availabil
ity
D)Confirm
ation
