mediumMultiple ChoiceObjective-mapped
ISC2 CC Practice Question: After a ransomware attack, the company wants to…
After a ransomware attack, the company wants to ensure that critical data can be restored. Which principle is being addressed?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Availability
Correct: C - Availability. Availability ensures data is accessible when needed, and backups are a key control. Option A is wrong because integrity ensures data accuracy. Option B is wrong because confidentiality prevents unauthorized disclosure. Option D is wrong because non-repudiation ensures actions cannot be denied.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Integrity
Why it's wrong here
Integrity ensures data accuracy.
- ✗
Confidentiality
Why it's wrong here
Confidentiality prevents unauthorized disclosure.
- ✓
Availability
Why this is correct
Availability ensures data is accessible when needed; backups support recovery.
- ✗
Non-repudiation
Why it's wrong here
Non-repudiation ensures actions cannot be denied.
Go deeper
Related to this question
Learn chapter
Access Control Fundamentals
Key term
Availability
Availability is the measure of how often a system or service is operational and accessible when needed, typically expressed as a percentage of uptime.
Key term
Non-repudiation
Non-repudiation is a security principle that ensures a party in a digital transaction cannot deny their involvement or the authenticity of their digital signature.
About these practice questions
This CC question is part of Courseiva's 976-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on CC
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. A security analyst discovers that an employee's workstation has been infected with ransomware. Which security principle has been directly violated?
easy- A.Availability
- ✓ B.Least privilege
- C.Separation of duties
- D.Defense in depth
Why B: Least privilege because the ransomware infection indicates that the employee had more privileges than necessary. The principle of least privilege states that users should be granted only the minimum access required to perform their job functions. If the employee had administrative or excessive rights, ransomware could execute and encrypt files, violating this principle. While availability is affected, the direct violation is the failure to adhere to least privilege, as the infection resulted from unnecessary privileges.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.