ISC2 Certified In Cybersecurity Exam
Questions And Answers
Which of the following involves a sophisticated attack in which a hacker
maintains a stealthy long term presence in the victim's network? - -
correct answer ✅Advanced Persistent Threat
Which of the following is an example of a technical control? - - correct
answer ✅Antivirus
Which of the following is not an example of protecting data-in-transit? -
- correct answer ✅Database Encryption
A data center technician needs to securely dispose of several hard
drives for systems that are being decommissioned. What technique is
not sufficient to ensue the data is not recoverable? - - correct answer
✅Erasure
A security engineer is trying to decide on the best course of action to
take to block internet traffic from specific IP addresses at the perimeter
of the company network. which of the following controls would allow
the security engineer to configure such rules? - - correct answer
✅Network Firewall
Which access control is common used in military and government
environments to protect classified information? - - correct answer
✅Mandatory Access Control (MAC)
, ISC2 Certified In Cybersecurity Exam
Questions And Answers
Which method of authentication provides the strongest security? - -
correct answer ✅Dual-Factor
Mary is conducting a risk analysis for her organization. Her boss, the
CISO, feels strongly that the organization's biggest risk is from hackers
trying to steal intellectual property from their engineering database
server so that is where their defensive focus should lie. this is an
example of what kind of analysis? - - correct answer ✅Qualitative Risk
Analysis
Which of the following best represents the process for security risk
management? - - correct answer ✅Risk Identification, assessment,
treatment
Of the job titles listed, which is most likely to be responsible for risk
management if the organization does not have a CISOL or Risk Officer? -
- correct answer ✅Chief Financial Officer
Which of the following terms describes the output of information that is
run through a hash function? - - correct answer ✅Message Digest
Which cloud service model gives customers access to platforms where
they can develop, test, and run code for applications in various
programming languages? - - correct answer ✅Platform as a Service
(PaaS)
Questions And Answers
Which of the following involves a sophisticated attack in which a hacker
maintains a stealthy long term presence in the victim's network? - -
correct answer ✅Advanced Persistent Threat
Which of the following is an example of a technical control? - - correct
answer ✅Antivirus
Which of the following is not an example of protecting data-in-transit? -
- correct answer ✅Database Encryption
A data center technician needs to securely dispose of several hard
drives for systems that are being decommissioned. What technique is
not sufficient to ensue the data is not recoverable? - - correct answer
✅Erasure
A security engineer is trying to decide on the best course of action to
take to block internet traffic from specific IP addresses at the perimeter
of the company network. which of the following controls would allow
the security engineer to configure such rules? - - correct answer
✅Network Firewall
Which access control is common used in military and government
environments to protect classified information? - - correct answer
✅Mandatory Access Control (MAC)
, ISC2 Certified In Cybersecurity Exam
Questions And Answers
Which method of authentication provides the strongest security? - -
correct answer ✅Dual-Factor
Mary is conducting a risk analysis for her organization. Her boss, the
CISO, feels strongly that the organization's biggest risk is from hackers
trying to steal intellectual property from their engineering database
server so that is where their defensive focus should lie. this is an
example of what kind of analysis? - - correct answer ✅Qualitative Risk
Analysis
Which of the following best represents the process for security risk
management? - - correct answer ✅Risk Identification, assessment,
treatment
Of the job titles listed, which is most likely to be responsible for risk
management if the organization does not have a CISOL or Risk Officer? -
- correct answer ✅Chief Financial Officer
Which of the following terms describes the output of information that is
run through a hash function? - - correct answer ✅Message Digest
Which cloud service model gives customers access to platforms where
they can develop, test, and run code for applications in various
programming languages? - - correct answer ✅Platform as a Service
(PaaS)
