ISC2 Certified in Cybersecurity: Chapter 1 Exam Questions with 100% Correct Answers 2024

ISC2 Certified in Cybersecurity: Chapter 1 Exam Questions with 100% Correct Answers 2024 A chief information security officer (CISO) at a large organization documented a policy that establishes the acceptable use of cloud environments for all staff. This is an example of a: (D1, L1.3.1) A) Management/Administrative control B) Technical control C) Physical control D) Cloud control A) Management/Administrative control Is it possible to avoid risk? (D1, L1.2.1) A) Yes B) No C) Sometimes D) Never A) Yes What is meant by non-repudiation? (D1, L1.1.1) A) If a user does something, they can't later claim that they didn't do it. B) Controls to protect the organization's reputation from harm due to inappropriate social media postings by employees, even if on their private accounts and personal time. C) It is part of the rules set by administrative controls. D) It is a security feature that prevents session replay attacks. A) If a user does something, they can't later claim that they didn't do it. Which of the following is NOT one of the four typical ways of managing risk? (D1, L1.2.1) A) Avoid B) Accept C) Mitigate D) Conflate D) Conflate Siobhan is deciding whether to make a purchase online; the vendor wants Siobhan to create a new user account, and is requesting Siobhan's full name, home address, credit card number, phone number, email address, the ability to send marketing messages to Siobhan, and permission to share this data with other ve