ISC2 CC Practice Test 10 — 10 Questions

Question 1

Which security principle ensures that data cannot be accessed by unauthorized individuals?

Accepted Answer

Confidentiality. Confidentiality ensures that data is not disclosed to unauthorized individuals, systems, or processes.

Answer

Integrity

Answer

Non-repudiation

Answer

Availability

Question 2

Which of the following is a benefit of using VLANs in a network?

Accepted Answer

Logical segmentation without additional hardware. VLANs allow logical segmentation of a network at Layer 2, improving security and reducing broadcast traffic without requiring additional physical switches.

Answer

Elimination of all broadcast traffic

Answer

Faster data transfer speeds

Answer

Increased physical security

Question 3

A security analyst receives an alert of unusual network traffic from an internal host to an external IP known for command-and-control. After isolating the host, what should be the next step?

Accepted Answer

Preserve forensic evidence and analyze. Preserving forensic evidence and analyzing the host is the correct next step because incident response methodology (e.g., NIST SP 800-61) requires containment followed by evidence collection and analysis to determine the scope of compromise, identify indicators of compromise (IOCs), and understand the attack vector. Wiping or reimaging destroys volatile data (e.g., memory, running processes, network connections) and artifacts (e.g., registry keys, prefetch files, event logs) that are critical for attribution and remediation. Analysis may involve memory forensics (using tools like Volatility) and disk forensics to extract malware samples, C2 communication logs, and lateral movement traces.

Answer

Wipe the host and reinstall OS

Answer

Reimage the host from backup

Answer

Notify law enforcement

Question 4

Which data classification level typically requires the highest level of protection?

Accepted Answer

Top secret. Top secret is the highest classification and requires strict controls.

Answer

Internal

Answer

Confidential

Answer

Public

Question 5

Which two protocols operate at the Transport layer of the OSI model? (Choose TWO.)

Accepted Answer

TCP. TCP and UDP are the primary Transport layer protocols. IP is Network layer, Ethernet is Data Link, and HTTP is Application layer.

Answer

HTTP

Answer

IP

Answer

Ethernet

Question 6

An organization is implementing a new access control system. Which TWO of the following are examples of Type 3 authentication factors?

Accepted Answer

Fingerprint scan. Type 3 (inherence) factors are biometric characteristics. Fingerprint and retina scan are biometrics. Password and smart card are not. PIN is knowledge.

Answer

Password

Answer

Smart card

Answer

Question 7

A security administrator is configuring a network device that monitors traffic and generates alerts when suspicious patterns are detected. The device does not block traffic. Which type of system is being deployed?

Accepted Answer

Intrusion Detection System (IDS). An IDS (Intrusion Detection System) is passive and only alerts, while an IPS actively blocks.

Answer

Web Application Firewall (WAF)

Answer

Intrusion Prevention System (IPS)

Answer

Next-Generation Firewall (NGFW)

Question 8

An organization is developing a data classification policy. Which THREE of the following are common classification levels?

Accepted Answer

Confidential. Public, confidential, and restricted are typical classification levels.

Answer

Critical

Answer

Sensitive

Question 9

According to the (ISC)² Code of Ethics, which obligation has the highest priority?

Accepted Answer

Protect society, the common good, and the public trust. The Code of Ethics states the highest priority is to protect society, the common good, and the public trust.

Answer

Provide diligent and competent service to principals

Answer

Advance and protect the profession

Answer

Act honorably, honestly, justly, responsibly, and legally

Question 10

A security analyst implements a hashing algorithm to verify that a downloaded file has not been altered. Which security goal is being achieved?

Accepted Answer

Integrity. Hashing ensures data integrity by detecting changes.

Answer

Authentication

Answer

Availability

Answer

Confidentiality