ISC2 Certified In Cybersecurity (CC)
Practice Exam Questions And Answers
A vendor sells a particular operating system (OS). In order to deploy the
OS securely on different platforms, the vendor publishes several sets of
instructions on how to install it, depending on which platform the
customer is using. This is an example of ______.
A. Law
B. Procedure
C. Standard
D. Policy - - correct answer ✅B. Procedure
The city of Grampon wants to know where all its public vehicles
(garbage trucks, police cars, etc.) are at all times, so the city has GPS
transmitters installed in all the vehicles. What kind of control is this?
A. Administrative
B. Entrenched
C. Physical
D. Technical - - correct answer ✅D. Technical
Triffid Corporation has a rule that all employees working with sensitive
hardcopy documents must put the documents into a safe at the end of
the workday, where they are locked up until the following workday.
What kind of control is the process of putting the documents into the
safe?
A. Administrative
,ISC2 Certified In Cybersecurity (CC)
Practice Exam Questions And Answers
B. Tangential
C. Physical
D. Technical - - correct answer ✅A. Administrative
Grampon municipal code requires that all companies that operate
within city limits will have a set of processes to ensure employees are
safe while working with hazardous materials. Triffid Corporation creates
a checklist of activities employees must follow while working with
hazardous materials inside Grampon city limits. The municipal code is a
______, and the Triffid checklist is a ________.
A. Law, procedure
B. Standard, law
C. Law, standard
D. Policy, standard
E. Policy, law - - correct answer ✅A. Law, procedure
Which of the following is an example of a "something you know"
authentication factor?
A. User ID
B. Password
C. Fingerprint
D. Iris scan - - correct answer ✅B. Password
,ISC2 Certified In Cybersecurity (CC)
Practice Exam Questions And Answers
Tina is an (ISC)² member and is invited to join an online group of IT
security enthusiasts. After attending a few online sessions, Tina learns
that some participants in the group are sharing malware with each
other, in order to use it against other organizations online. What should
Tina do?
A. Nothing
B. Stop participating in the group
C. Report the group to law enforcement
D. Report the group to (ISC)2 - - correct answer ✅B. Stop participating
A bollard is a post set securely in the ground in order to prevent a
vehicle from entering an area or driving past a certain point. Bollards
are an example of ______ controls.
A. Physical
B. Administrative
C. Drastic
D. Technical - - correct answer ✅A. Physical
Triffid Corporation has a policy that all employees must receive security
awareness instruction before using email; the company wants to make
employees aware of potential phishing attempts that the employees
might receive via email. What kind of control is this instruction?
A. Administrative
, ISC2 Certified In Cybersecurity (CC)
Practice Exam Questions And Answers
B. Finite
C. Physical
D. Technical - - correct answer ✅A. Administrative
The Triffid Corporation publishes a strategic overview of the company's
intent to secure all the data the company possesses. This document is
signed by Triffid senior management. What kind of document is this?
A. Policy
B. Procedure
C. Standard
D. Law - - correct answer ✅A. Policy
Chad is a security practitioner tasked with ensuring that the information
on the organization's public website is not changed by anyone outside
the organization. This task is an example of ensuring _________.
A. Confidentiality
B. Integrity
C. Availability
D. Confirmation - - correct answer ✅B. Integrity
The city of Grampon wants to ensure that all of its citizens are
protected from malware, so the city council creates a rule that anyone
Practice Exam Questions And Answers
A vendor sells a particular operating system (OS). In order to deploy the
OS securely on different platforms, the vendor publishes several sets of
instructions on how to install it, depending on which platform the
customer is using. This is an example of ______.
A. Law
B. Procedure
C. Standard
D. Policy - - correct answer ✅B. Procedure
The city of Grampon wants to know where all its public vehicles
(garbage trucks, police cars, etc.) are at all times, so the city has GPS
transmitters installed in all the vehicles. What kind of control is this?
A. Administrative
B. Entrenched
C. Physical
D. Technical - - correct answer ✅D. Technical
Triffid Corporation has a rule that all employees working with sensitive
hardcopy documents must put the documents into a safe at the end of
the workday, where they are locked up until the following workday.
What kind of control is the process of putting the documents into the
safe?
A. Administrative
,ISC2 Certified In Cybersecurity (CC)
Practice Exam Questions And Answers
B. Tangential
C. Physical
D. Technical - - correct answer ✅A. Administrative
Grampon municipal code requires that all companies that operate
within city limits will have a set of processes to ensure employees are
safe while working with hazardous materials. Triffid Corporation creates
a checklist of activities employees must follow while working with
hazardous materials inside Grampon city limits. The municipal code is a
______, and the Triffid checklist is a ________.
A. Law, procedure
B. Standard, law
C. Law, standard
D. Policy, standard
E. Policy, law - - correct answer ✅A. Law, procedure
Which of the following is an example of a "something you know"
authentication factor?
A. User ID
B. Password
C. Fingerprint
D. Iris scan - - correct answer ✅B. Password
,ISC2 Certified In Cybersecurity (CC)
Practice Exam Questions And Answers
Tina is an (ISC)² member and is invited to join an online group of IT
security enthusiasts. After attending a few online sessions, Tina learns
that some participants in the group are sharing malware with each
other, in order to use it against other organizations online. What should
Tina do?
A. Nothing
B. Stop participating in the group
C. Report the group to law enforcement
D. Report the group to (ISC)2 - - correct answer ✅B. Stop participating
A bollard is a post set securely in the ground in order to prevent a
vehicle from entering an area or driving past a certain point. Bollards
are an example of ______ controls.
A. Physical
B. Administrative
C. Drastic
D. Technical - - correct answer ✅A. Physical
Triffid Corporation has a policy that all employees must receive security
awareness instruction before using email; the company wants to make
employees aware of potential phishing attempts that the employees
might receive via email. What kind of control is this instruction?
A. Administrative
, ISC2 Certified In Cybersecurity (CC)
Practice Exam Questions And Answers
B. Finite
C. Physical
D. Technical - - correct answer ✅A. Administrative
The Triffid Corporation publishes a strategic overview of the company's
intent to secure all the data the company possesses. This document is
signed by Triffid senior management. What kind of document is this?
A. Policy
B. Procedure
C. Standard
D. Law - - correct answer ✅A. Policy
Chad is a security practitioner tasked with ensuring that the information
on the organization's public website is not changed by anyone outside
the organization. This task is an example of ensuring _________.
A. Confidentiality
B. Integrity
C. Availability
D. Confirmation - - correct answer ✅B. Integrity
The city of Grampon wants to ensure that all of its citizens are
protected from malware, so the city council creates a rule that anyone
