ISC2 CERTIFIED IN CYBERSECURITY CC
PRACTICE CERTIFICATION EVALUATION
2026 QUESTIONS WITH SOLUTIONS
GRADED A+
⩥ iOS. Answer: An operating system manufactured by Apple Inc. Used
for mobile devices.
⩥ Layered Defense. Answer: The use of multiple controls arranged in
series to provide several consecutive controls to protect an asset; also
called defense in depth.
⩥ Likelihood. Answer: The probability that a potential vulnerability may
be exercised within the construct of the associated threat environment.
⩥ Likelihood of Occurrence. Answer: A weighted factor based on a
subjective analysis of the probability that a given threat is capable of
exploiting a given vulnerability or set of vulnerabilities.
⩥ Linux. Answer: An operating system that is open source, making its
source code legally available to end users.
,⩥ Log Anomaly. Answer: A system irregularity that is identified when
studying log entries which could represent events of interest for further
surveillance.
⩥ Logging. Answer: Collecting and storing user activities in a log,
which is a record of the events occurring within an organization's
systems and networks. NIST SP 1800-25B.
⩥ Logical Access Control Systems. Answer: An automated system that
controls an individual's ability to access one or more computer system
resources, such as a workstation, network, application or database. A
logical access control system requires the validation of an individual's
identity through some mechanism, such as a PIN, card, biometric or
other token. It has the capability to assign different access privileges to
different individuals depending on their roles and responsibilities in an
organization. NIST SP 800-53 Rev.5.
⩥ Man-in-the-Middle. Answer: An attack where the adversary positions
himself in between the user and the system so that he can intercept and
alter data traveling between them. Source: NISTIR 7711
⩥ Mandatory Access Control. Answer: Access control that requires the
system itself to manage access controls in accordance with the
organization's security policies.
, ⩥ Mantrap. Answer: An entrance to a building or an area that requires
people to pass through two doors with only one door opened at a time.
⩥ Message Digest. Answer: A digital signature that uniquely identifies
data and has the property such that changing a single bit in the data will
cause a completely different message digest to be generated. NISTIR-
8011 Vol.3
⩥ Microsegmentation. Answer: Part of a zero-trust strategy that breaks
LANs into very small, highly localized zones using firewalls or similar
technologies. At the limit, this places firewall at every connection point.
⩥ Multi-Factor Authentication. Answer: Using two or more distinct
instances of the three factors of authentication (something you know,
something you have, something you are) for identity verification.
⩥ National Institutes of Standards and Technology (NIST). Answer: The
NIST is part of the U.S. Department of Commerce and addresses the
measurement infrastructure within science and technology efforts within
the U.S. federal government. NIST sets standards in a number of areas,
including information security within the Computer Security Resource
Center of the Computer Security Divisions.
⩥ Non-repudiation. Answer: The inability to deny taking an action such
as creating information, approving information and sending or receiving
a message.
PRACTICE CERTIFICATION EVALUATION
2026 QUESTIONS WITH SOLUTIONS
GRADED A+
⩥ iOS. Answer: An operating system manufactured by Apple Inc. Used
for mobile devices.
⩥ Layered Defense. Answer: The use of multiple controls arranged in
series to provide several consecutive controls to protect an asset; also
called defense in depth.
⩥ Likelihood. Answer: The probability that a potential vulnerability may
be exercised within the construct of the associated threat environment.
⩥ Likelihood of Occurrence. Answer: A weighted factor based on a
subjective analysis of the probability that a given threat is capable of
exploiting a given vulnerability or set of vulnerabilities.
⩥ Linux. Answer: An operating system that is open source, making its
source code legally available to end users.
,⩥ Log Anomaly. Answer: A system irregularity that is identified when
studying log entries which could represent events of interest for further
surveillance.
⩥ Logging. Answer: Collecting and storing user activities in a log,
which is a record of the events occurring within an organization's
systems and networks. NIST SP 1800-25B.
⩥ Logical Access Control Systems. Answer: An automated system that
controls an individual's ability to access one or more computer system
resources, such as a workstation, network, application or database. A
logical access control system requires the validation of an individual's
identity through some mechanism, such as a PIN, card, biometric or
other token. It has the capability to assign different access privileges to
different individuals depending on their roles and responsibilities in an
organization. NIST SP 800-53 Rev.5.
⩥ Man-in-the-Middle. Answer: An attack where the adversary positions
himself in between the user and the system so that he can intercept and
alter data traveling between them. Source: NISTIR 7711
⩥ Mandatory Access Control. Answer: Access control that requires the
system itself to manage access controls in accordance with the
organization's security policies.
, ⩥ Mantrap. Answer: An entrance to a building or an area that requires
people to pass through two doors with only one door opened at a time.
⩥ Message Digest. Answer: A digital signature that uniquely identifies
data and has the property such that changing a single bit in the data will
cause a completely different message digest to be generated. NISTIR-
8011 Vol.3
⩥ Microsegmentation. Answer: Part of a zero-trust strategy that breaks
LANs into very small, highly localized zones using firewalls or similar
technologies. At the limit, this places firewall at every connection point.
⩥ Multi-Factor Authentication. Answer: Using two or more distinct
instances of the three factors of authentication (something you know,
something you have, something you are) for identity verification.
⩥ National Institutes of Standards and Technology (NIST). Answer: The
NIST is part of the U.S. Department of Commerce and addresses the
measurement infrastructure within science and technology efforts within
the U.S. federal government. NIST sets standards in a number of areas,
including information security within the Computer Security Resource
Center of the Computer Security Divisions.
⩥ Non-repudiation. Answer: The inability to deny taking an action such
as creating information, approving information and sending or receiving
a message.
