How many Select Two (Multi-Select) Questions questions are on this page?

This page has 20 Select Two (Multi-Select) Questions scenario questions for the CC exam, each with detailed explanations and wrong-answer analysis.

How should I approach CC scenario questions?

Read the full scenario before looking at the answer options. Identify the constraint or requirement in the scenario, then eliminate options that are generally true but wrong for this specific case. Scenario questions reward careful reading over pattern matching.

← Back to ISC2 Certified in Cybersecurity CC questions

Scenario-based practice

Select Two (Multi-Select) Questions

Practise ISC2 Certified in Cybersecurity CC practice questions — original exam-style scenarios covering every exam domain, with detailed explanations, wrong-answer analysis, and common exam traps.

Start full practice test Read exam guide

scenario questions

exam code

ISC2

vendor

Scenario guide

How to approach select two (multi-select) questions

Multi-select questions tell you to 'Choose TWO' or 'Choose THREE'. Getting partial credit is not a thing — you must select all correct answers with no incorrect ones. The stem always states how many to choose, so trust it. These questions require precision, not best-guess elimination.

Quick answer

Select Two (Multi-Select) Questions questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Practice scenarios

Question 1hardmulti select

Study the full AAA explanation →

A security administrator is reviewing the principles of access control. Which TWO of the following are core components of the AAA framework? (Select TWO.)

A
Authorization
Authorization determines access rights; it is a core AAA component.
B
Identification
Why wrong: Identification is a step before authentication, not a separate AAA component.
C
Non-repudiation
Why wrong: Non-repudiation is a security objective, not part of AAA.
D
Authentication
Authentication verifies identity; it is a core AAA component.
E
Auditing
Why wrong: Auditing is part of accounting but not a separate AAA component.

Select Two (Multi-Select) Questions

How to approach select two (multi-select) questions

Quick answer

Related CC topic practice pages

Access Controls Concepts practice questions

Business Continuity, DR & Incident Response practice questions

Security Principles practice questions

Network Security practice questions

Security Operations practice questions

CC fundamentals practice questions

CC scenario practice questions

CC troubleshooting practice questions

Practice scenarios

A security administrator is reviewing the principles of access control. Which TWO of the following are core components of the AAA framework? (Select TWO.)

Which TWO of the following are primary objectives of an incident response plan? (Choose two.)

A network security team is implementing a defense-in-depth strategy. Which TWO of the following controls are examples of network segmentation? (Choose two.)

Which TWO are characteristics of Role-Based Access Control (RBAC)?

Which TWO of the following are core components of the ISC2 Code of Ethics? (Choose two.)

Which THREE of the following are recognized security control types according to ISC2? (Choose three.)

Which THREE are valid methods for authenticating a user in an access control system?

Which THREE of the following are characteristics of a stateful firewall? (Select exactly three.)

Which THREE of the following are examples of the principle of least privilege? (Select THREE.)

Which THREE elements are essential components of a business continuity plan (BCP)?

Which TWO of the following are core principles of information security?

Which TWO actions are appropriate during the identification phase of incident response?

Which TWO of the following are types of security controls used in defense in depth? (Select TWO.)

Which TWO of the following are common indicators of a phishing email? (Select TWO.)

Which TWO scenarios best illustrate the principle of least privilege?

Which TWO are true about a differential backup? (Select two.)

Which TWO are key components of an effective incident response plan? (Select TWO.)

In incident response, which TWO are considered volatile data that should be collected first? (Select exactly 2.)

Which THREE are commonly defined in a disaster recovery plan? (Select exactly 3.)