(ISC)2 Certified in Cybersecurity - Exam
Prep UPDATED ACTUAL Exam Questions
and CORRECT Answers
What type of security policy normally describes how users may access business information with
their own devices? - CORRECT ANSWER - BYOD Policy
_________ the set of controls designed to keep a business running in the face of adversity,
whether natural or man-made. - CORRECT ANSWER - Business Continuity Planning (BCP)
BCP is also known as _________. - CORRECT ANSWER - Continuity of Operations
Planning (COOP)
Defining the BCP Scope: - CORRECT ANSWER - What business activities will the plan
cover? What systems will it cover? What controls will it consider?
_________ identifies and prioritizes risks. - CORRECT ANSWER - Business Impact
Assessment
BCP in the cloud requires _________ between providers and customers. - CORRECT
ANSWER - Collaboration
_________ protects against the failure of a single component. - CORRECT ANSWER -
Redundancy
_________ identifies and removes SPOFs. - CORRECT ANSWER - Single Point of Failure
Analysis
,_________ continues until the cost of addressing risks outweighs the benefit. - CORRECT
ANSWER - SPOF Analysis
_________ uses multiple systems to protect against service failure. - CORRECT ANSWER -
High Availability
_________ makes a single system resilient against technical failures. - CORRECT
ANSWER - Fault Tolerance
_________ spreads demand across systems. - CORRECT ANSWER - Load Balancing
3 Common Points of Failure in a system. - CORRECT ANSWER - Power Supply, Storage
Media, Networking
Disk Mirroring is which RAID level? - CORRECT ANSWER -1
Disk striping with parity is which RAID level? - CORRECT ANSWER - 5 (uses 3 or more
disks to store data)
What goal of security is enhanced by a strong business continuity program? - CORRECT
ANSWER - Availability
What is the minimum number of disk required to perform RAID level 5? - CORRECT
ANSWER - 3
What type of control are we using if we supplement a single firewall with a second standby
firewall ready to assume responsibility if the primary firewall fails? - CORRECT ANSWER -
High Availability
_________ provide structure during cybersecurity incidents. - CORRECT ANSWER -
Incident Response Plan
,_________ describe the policies and procedures governing cybersecurity incidents. - CORRECT
ANSWER - Incident Response Plans
_________ leads to strong incident response. - CORRECT ANSWER - Prior Planning
Incident Response Plans should include: - CORRECT ANSWER - Statement of Purpose,
Strategies and goals for incident response, Approach to incident response, Communication with
other groups, Senior leadership approval
_________ should be consulted when developing a plan. - CORRECT ANSWER - NIST SP
800-61
Incident response teams must have personnel available _________. - CORRECT ANSWER -
24/7
_________ is crucial to effective incident identification. - CORRECT ANSWER - Monitoring
_________ security solution that collects information from diverse sources, analyzes it for signs
for security incidents and retains it for later use. - CORRECT ANSWER - Security Incident
and Event Management (SIEM)
The highest priority of a first responder must be containing damage through _________. -
CORRECT ANSWER - Isolation
During an incident response, what is the highest priority of first responders? - CORRECT
ANSWER - Containing the damage
You are normally required to report security incidents to law enforcement if you believe a law
may have been violated. True or False - CORRECT ANSWER - False
, _________ restores normal operations as quickly as possible. - CORRECT ANSWER -
Disaster Recovery
What are the initial response goals regarding Disaster Recovery? - CORRECT ANSWER -
Contain the Damage, Recover normal operations
_________ is the amount of time to restore service. - CORRECT ANSWER - Recovery Time
Objective (RTO)
_________ is the amount of data to recover. - CORRECT ANSWER - Recovery Point
Objective (RPO)
_________ is the percentage of service to restore. - CORRECT ANSWER - Recovery Service
Level (RSL)
_________ provide a data "safety net" - CORRECT ANSWER - Backups
Types of Backup Media: - CORRECT ANSWER - Tape backups, Disk-to-disk backups,
Cloud backups
_________ include a complete copy of all data. - CORRECT ANSWER - Full Backups
_________ are types of full backups. - CORRECT ANSWER - Snapshots and Images
_________ include all data modified since the last full backup. - CORRECT ANSWER -
Differential Backups
_________ include all data modified since the last full or incremental backup. - CORRECT
ANSWER - Incremental Backups
Prep UPDATED ACTUAL Exam Questions
and CORRECT Answers
What type of security policy normally describes how users may access business information with
their own devices? - CORRECT ANSWER - BYOD Policy
_________ the set of controls designed to keep a business running in the face of adversity,
whether natural or man-made. - CORRECT ANSWER - Business Continuity Planning (BCP)
BCP is also known as _________. - CORRECT ANSWER - Continuity of Operations
Planning (COOP)
Defining the BCP Scope: - CORRECT ANSWER - What business activities will the plan
cover? What systems will it cover? What controls will it consider?
_________ identifies and prioritizes risks. - CORRECT ANSWER - Business Impact
Assessment
BCP in the cloud requires _________ between providers and customers. - CORRECT
ANSWER - Collaboration
_________ protects against the failure of a single component. - CORRECT ANSWER -
Redundancy
_________ identifies and removes SPOFs. - CORRECT ANSWER - Single Point of Failure
Analysis
,_________ continues until the cost of addressing risks outweighs the benefit. - CORRECT
ANSWER - SPOF Analysis
_________ uses multiple systems to protect against service failure. - CORRECT ANSWER -
High Availability
_________ makes a single system resilient against technical failures. - CORRECT
ANSWER - Fault Tolerance
_________ spreads demand across systems. - CORRECT ANSWER - Load Balancing
3 Common Points of Failure in a system. - CORRECT ANSWER - Power Supply, Storage
Media, Networking
Disk Mirroring is which RAID level? - CORRECT ANSWER -1
Disk striping with parity is which RAID level? - CORRECT ANSWER - 5 (uses 3 or more
disks to store data)
What goal of security is enhanced by a strong business continuity program? - CORRECT
ANSWER - Availability
What is the minimum number of disk required to perform RAID level 5? - CORRECT
ANSWER - 3
What type of control are we using if we supplement a single firewall with a second standby
firewall ready to assume responsibility if the primary firewall fails? - CORRECT ANSWER -
High Availability
_________ provide structure during cybersecurity incidents. - CORRECT ANSWER -
Incident Response Plan
,_________ describe the policies and procedures governing cybersecurity incidents. - CORRECT
ANSWER - Incident Response Plans
_________ leads to strong incident response. - CORRECT ANSWER - Prior Planning
Incident Response Plans should include: - CORRECT ANSWER - Statement of Purpose,
Strategies and goals for incident response, Approach to incident response, Communication with
other groups, Senior leadership approval
_________ should be consulted when developing a plan. - CORRECT ANSWER - NIST SP
800-61
Incident response teams must have personnel available _________. - CORRECT ANSWER -
24/7
_________ is crucial to effective incident identification. - CORRECT ANSWER - Monitoring
_________ security solution that collects information from diverse sources, analyzes it for signs
for security incidents and retains it for later use. - CORRECT ANSWER - Security Incident
and Event Management (SIEM)
The highest priority of a first responder must be containing damage through _________. -
CORRECT ANSWER - Isolation
During an incident response, what is the highest priority of first responders? - CORRECT
ANSWER - Containing the damage
You are normally required to report security incidents to law enforcement if you believe a law
may have been violated. True or False - CORRECT ANSWER - False
, _________ restores normal operations as quickly as possible. - CORRECT ANSWER -
Disaster Recovery
What are the initial response goals regarding Disaster Recovery? - CORRECT ANSWER -
Contain the Damage, Recover normal operations
_________ is the amount of time to restore service. - CORRECT ANSWER - Recovery Time
Objective (RTO)
_________ is the amount of data to recover. - CORRECT ANSWER - Recovery Point
Objective (RPO)
_________ is the percentage of service to restore. - CORRECT ANSWER - Recovery Service
Level (RSL)
_________ provide a data "safety net" - CORRECT ANSWER - Backups
Types of Backup Media: - CORRECT ANSWER - Tape backups, Disk-to-disk backups,
Cloud backups
_________ include a complete copy of all data. - CORRECT ANSWER - Full Backups
_________ are types of full backups. - CORRECT ANSWER - Snapshots and Images
_________ include all data modified since the last full backup. - CORRECT ANSWER -
Differential Backups
_________ include all data modified since the last full or incremental backup. - CORRECT
ANSWER - Incremental Backups
