EC-Council CCT QUESTIONS AND ANSWERS |
VERIFIED AND WELL DETAILED ANSWERS | PLUS
RATIONALES | GUARANTEED PASS | LATEST EXAM
UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE
TEST
,Domain 1: Information Security Fundamentals (Q1–15)
Q1. What does the CIA triad stand for in information security?
A) Confidentiality, Integrity, Availability
B) Control, Intelligence, Authentication
C) Cryptography, Identification, Authorization
D) Compliance, Investigation, Audit
Answer: A
Rationale: The CIA triad (Confidentiality, Integrity, Availability) is the foundational model for information security.
Confidentiality ensures data is accessed only by authorized parties; Integrity ensures data is accurate and
unaltered; Availability ensures data/systems are accessible when needed. The other options are not standard
security models.
,Q2. Which principle states that a user should be given only the minimum access rights needed to perform their
job?
A) Separation of duties
B) Least privilege
C) Need-to-know
D) Defense in depth
Answer: B
Rationale: Least privilege means granting users only the minimum permissions required to complete their tasks.
Need-to-know is related but focuses on information access specifically. Separation of duties prevents fraud by
dividing tasks. Defense in depth is a layered security strategy.
Q3. What type of attack involves an attacker inserting themselves between two communicating parties?
A) DDoS
B) Man-in-the-Middle (MitM)
C) Phishing
D) SQL Injection
, Answer: B
Rationale: A Man-in-the-Middle attack intercepts communications between two parties, allowing the attacker to
eavesdrop or alter traffic. DDoS floods a service, phishing tricks users into revealing credentials, and SQL
injection exploits database queries.
Q4. Which of the following BEST describes "non-repudiation"?
A) Ensuring data is encrypted
B) Proving that a party cannot deny having performed an action
C) Preventing unauthorized access
D) Backing up data regularly
Answer: B
Rationale: Non-repudiation ensures a sender cannot deny sending a message or performing an action, typically
achieved via digital signatures and audit logs. It is a key goal of cryptography and forensic logging.
VERIFIED AND WELL DETAILED ANSWERS | PLUS
RATIONALES | GUARANTEED PASS | LATEST EXAM
UPDATE | EXAM PREP | STUDY GUIDE | PRACTICE
TEST
,Domain 1: Information Security Fundamentals (Q1–15)
Q1. What does the CIA triad stand for in information security?
A) Confidentiality, Integrity, Availability
B) Control, Intelligence, Authentication
C) Cryptography, Identification, Authorization
D) Compliance, Investigation, Audit
Answer: A
Rationale: The CIA triad (Confidentiality, Integrity, Availability) is the foundational model for information security.
Confidentiality ensures data is accessed only by authorized parties; Integrity ensures data is accurate and
unaltered; Availability ensures data/systems are accessible when needed. The other options are not standard
security models.
,Q2. Which principle states that a user should be given only the minimum access rights needed to perform their
job?
A) Separation of duties
B) Least privilege
C) Need-to-know
D) Defense in depth
Answer: B
Rationale: Least privilege means granting users only the minimum permissions required to complete their tasks.
Need-to-know is related but focuses on information access specifically. Separation of duties prevents fraud by
dividing tasks. Defense in depth is a layered security strategy.
Q3. What type of attack involves an attacker inserting themselves between two communicating parties?
A) DDoS
B) Man-in-the-Middle (MitM)
C) Phishing
D) SQL Injection
, Answer: B
Rationale: A Man-in-the-Middle attack intercepts communications between two parties, allowing the attacker to
eavesdrop or alter traffic. DDoS floods a service, phishing tricks users into revealing credentials, and SQL
injection exploits database queries.
Q4. Which of the following BEST describes "non-repudiation"?
A) Ensuring data is encrypted
B) Proving that a party cannot deny having performed an action
C) Preventing unauthorized access
D) Backing up data regularly
Answer: B
Rationale: Non-repudiation ensures a sender cannot deny sending a message or performing an action, typically
achieved via digital signatures and audit logs. It is a key goal of cryptography and forensic logging.
