stud
bud
Sign up
Log in
Home
Library
Explore
SAT
More
ISC2 CC Flashcards | StudBud
Explore
/
ISC2 CC
ISC2 CC
29 terms
·
StudBud Administration
·
25 plays
Imported from external platform
Flashcards
29 cards
F
Practice quiz
P
Host live
L
Questions
29
Answers
1
Which of the following is a security goal associated with data integrity?
Ensuring high availability of services
Protecting information from being altered without authorization
Preventing loss of power
Limiting physical access
2
What is the meaning to life, the universe and everything
Do whatever you want
Don’t think about it
Be quiet and stop asking
42
3
What is the purpose of the principle of least privilege?
Allowing temporary users to bypass security
Ensuring users only have access necessary for their role
Making systems faster by disabling logs
Granting full access to all users
4
Which term describes an attempt to gain unauthorized access using deception?
Social Engineering
Hacking
Spoofing
Sniffing
5
Which type of control is a security policy?
Physical
Administrative
Logical
Technical
6
What does antivirus software primarily protect against?
Data loss
Malware infections
Unauthorized access
Power surges
7
What is Multi-Factor Authentication (MFA)?
Using multiple methods from different authentication categories
Logging in from different devices
Using one strong password
Changing passwords every 30 days
8
Which protocol is used to encrypt web traffic?
HTTPS
FTP
HTTP
Telnet
9
Which term describes unsolicited, bulk email?
Spoofing
Spam
Phishing
Smishing
10
Which type of control is a security policy?
Administrative
Physical
Technical
Logical
11
Which of the following defines permissions based on a user's role in the organisation?
Mandatory Access Control (MAC)
Role-Based Access Control (RBAC)
Discretionary Access Control (DAC)
Attribute-Based Access Control (ABAC)
12
Which access model allows owners to control access to their resources?
RBAC
ABAC
MAC
DAC
13
Which type of authentication uses something you are?
Access card
Fingerprint
PIN
Password
14
Which attack floods a network with traffic to make services unavailable?
Machine-in-the-middle
DDoS
Sniffing
Spoofing
15
What should an organisation do after a security incident is resolved?
Block all external access
Conduct a post-incident review
Shut down the system
Forget about the event
16
Which is an example of logical access control?
Fire extinguisher
Password policy
Door lock
Security guard
17
Which of the following devices separates one network from another?
Patch panel
Switch
Modem
Router
18
What is the first step in incident response?
Identification
Containment
Recovery
Eradication
19
Is pinapple on pizza acceptable ?
False
True
20
What is the purpose of a Business Continuity Plan?
To increase internet speed
To maintain operations during and after a disaster
To ensure profitability
To reduce audit frequency
21
What is the role of patch management?
Encrypting files
Updating software to fix vulnerabilities
Increasing server load
Replacing hardware
22
What is an example of a containment strategy in incident response?
Disconnecting an infected system from the network
Reinstalling the OS
Calling law enforcement
Notifying customers
23
What is the function of a firewall?
Monitor power consumption
Encrypt data on disk
Detect malware
Control network traffic based on rules
24
Which of the following helps detect and respond to security incidents in real time?
Patch management tool
Antivirus scanner
Backup software
SIEM system
25
Which of the following helps monitor and log user activity?
Audit trail
Firewall
DNS server
Authentication server
26
Starwars (Blue ) or Startrek (Red)
True
False
27
Which of the following is a primary goal of cybersecurity?
Ensuring data confidentiality, integrity, and availability
Increasing storage capacity
Reducing staff headcount
Maximizing bandwidth
28
Which document outlines how to recover IT systems during a disruption?
Acceptable Use Policy
Privacy policy
Network Architecture Document
Disaster Recovery Plan
29
What is the purpose of encryption?
To increase processing speed
To make backups faster
To delete unused files
To protect data confidentiality
