Free CC Exam Questions

Which of the following is very likely to be used in a disaster recovery effort?

Which of these components is very likely to be instrumental to any disaster recovery (DR) effort?

A set of security controls or system settings used to ensure uniformity of configuration through the IT environment.

You are working in your organization's security office. You receive a call from a user who has tried to log in to the network several times with the correct credentials, with no success. After a brief investigation, you determine that the user's account has been compromised. This is an example of a.....

An external entity has tried to gain access to your organization's IT environment without proper authorization. This Will be called ________

True or False? The IT department is responsible for creating the organization's business continuity plan.

Which of these activities is often associated with DR efforts?

Which of the following statements best describes the purpose of deception technology in cybersecurity?

A company wants to ensure that only employees with specific roles can access certain data. Which access control model should they implement?

A company is concerned about data loss during a disaster. What type of backup strategy should they implement to minimize data loss?

An organization is implementing a zero-trust security model. Which of the following statements accurately reflects a key principle of zero-trust architecture?

Which principle addresses the information security strategy by integrating people, technology, and operations to establish variable barriers across multiple layers and missions of the organization?

A common network device used to filter traffic?

What are the primary approaches ids take to analyse events to detect attacks?

Which of the following is the least secure communications protocol?

David is worried about distributed denial of service attacks against his company’s primary web application. which of the following options will provide the MOST resilience against large-scale DDoS attacks?

Which type of network is set up similar to the internet but is private to an organization? Select the MOST appropriate.

Julia is listening to network traffic and capturing passwords as they are sent to the authentication server. She plans to use the passwords as part of a future attack. What type of attack is this?

What is the purpose of non-repudiation in information security?

Which one of the following cryptographic algorithms does not depend upon the prime factorization problem?

Some Employees of his organization launched a privilege escalation attack to gain root access to one of the organization’s database servers. The employee does have an authorized user account on the server. What log file would be MOST likely to contain relevant information??

Which of the following best describes a zero-day vulnerability?

What is the primary goal of a risk management process in cybersecurity?A) B) C) D) 

What is the primary goal of implementing input validation in application security?

Which of the following is a common security measure to prevent Cross- Site Scripting (XSS) attacks in web applications?A) B) C) D) 

Which of the following best describes the principle of least privilege?

What is the primary goal of implementing security policies in an organization?

Which security principle focuses on ensuring that data cannot be altered without authorization?

Which of the following is an example of a physical security control?

Which of the following best describes the concept of defense in depth?

What is the main goal of business continuity planning?

Which phase of the disaster recovery plan involves the restoration of normal operations?

What is the purpose of conducting a Business Impact Analysis (BIA)?

Which of the following is a primary component of an incident response plan?

What is the main purpose of disaster recovery testing?

Which access control model is based on the classification of information and clearance levels of users?

What is the primary purpose of the principle of separation of duties?

Which access control model permits data owners to decide who can access their resources?

What is an example of  preventive access control?

Which of the following best describes the concept of least privilege?

What is the main advantage of using Single Sign-On (SSO)?

Which device is primarily used to filter and monitor network traffic, both incoming and outgoing, according to predefined security rules?

What is the primary function of a Virtual Private Network (VPN)?

Which of the following is a common method for preventing DDoS attacks?

What type of attack involves intercepting and possibly modifying communication between two parties without their awareness?

What security measure is used to detect and prevent unauthorized access to a private network?

What is the primary goal of security operations within an organization?

Which of the following is a key activity in security operations to maintain the integrity of systems?

What type of system is designed to automatically detect and respond to potential security threats?

Which of the following best describes a security incident?

What is the purpose of a Security Operations Center (SOC)?

Which process involves identifying, assessing, and mitigating risks to an organization’s information systems?

You are assisting your organization in implementing new firewall rules. What type of control are you implementing?

You become aware that one of your colleagues provided a CC candidate with the text of several questions that appeared on their certification exam. What canon of the ISC2 code of ethics was most directly violated?

Your organization recently experienced a disaster that activated their disaster recovery program. At what point is the effort considered concluded?

Your organization recently experienced a security incident where the attacker was able to take down your primary website. What cybersecurity principle does this attack most directly violate?

You are building a new file system where each department’s managers can control access to files stored on their portion of the server, granting it to anyone they choose. What access control model best describes this approach?

Which one of the following is NOT a standard part of the crime prevention through environmental design (CP TED) philosophy?

You are setting up a new wireless network and would like to configure it to require that people accept terms and conditions before using the network. The network will be used by many thousands of guests each day. What access control mechanism would be most efficient?

You are installing a public-facing web server for your organization. What network zone would be the most appropriate for this device?