Exam (elaborations)
ISC2 Cybersecurity Certification (CC) Exam Questions and Answers
- Course
- Institution
ISC2 Cybersecurity Certification (CC) Exam Questions and Answers
[Show more]
Content preview
ISC2 Cybersecurity Certification (CC)Exam Questions and Answers
What type of security training is specifically designed to educate employees about
attack techniques? - Answer- capture the flag
Linda's organization recently experienced a social engineering attack. The attacker
called a help desk employee and persuaded her that she was a project manager on a
tight deadline and locked out of her account. The help desk technician provided the
attacker with access to the account. What social engineering principle was used? -
Answer- urgency
What type of phishing attack focuses specifically on senior executives of a targeted
organization? - Answer- whaling
Which one of the following data sanitization strategies is most secure? - Answer-
destruction
Data classifications should be assigned based upon: - Answer- sensitivity and criticality
If Alice wants to send a message to Bob using symmetric cryptography, what key does
she use to encrypt the message? - Answer- shared secret key
What are the hash lengths from the SHA-2 function? - Answer- 224, 256, and 512 bits
What operation uses a cryptographic key to convert plaintext into ciphertext? - Answer-
encryption
What are the characteristics of cloud computing? - Answer- ubiquitous, on-demand,
convenient
Purchasing server instances and configuring them to run your own software is an
example of what cloud deployment model? - Answer- Infrastructure as a Service (IaaS)
What type of agreement is used to define availability requirements for an IT service that
an organization is purchasing from a vendor? - Answer- Service Level Agreement (SLA)
Which cloud deployment model exclusively uses dedicated cloud resources for a
customer? - Answer- private cloud
Vendors extend your organization's technology environment. If they handle data on your
behalf, you should expect they execute the same degree of care that you would in your
own operations. - Answer- true
, Which one of the following devices carries VLANs on a network? - Answer- switch
What security principle does a firewall implement with traffic when it does not have a
rule that explicitly defines an action for that communication? - Answer- implicit deny
Ricky would like to separate his network into three distinct security zones. Which one of
the following devices is best suited to that task? - Answer- firewall
What network device can connect together multiple networks? - Answer- router
What is the most important control to apply to smart devices? - Answer- network
segmentation
What network port is used for SSL/TLS VPN connections? - Answer- 443
What is the piece of software running on a device that enables it to connect to a NAC-
protected network? - Answer- supplicant
Nessus is an example of a _____ tool. - Answer- network vulnerability scanning
Nmap is an example of a _____ tool. - Answer- port scanning
Rachel recently investigated a security alert from her intrusion detection system and,
after exhaustive research, determined that the alert was not the result of an intrusion.
What type of error occurred? - Answer- false positive
What type of malware prevention is most effective against known viruses? - Answer-
signature detection
Which one of the following techniques is useful in preventing replay attacks? - Answer-
session tokens
What type of malware spreads under its own power? - Answer- worm
Brad is configuring a new wireless network for his small business. What wireless
security standard should he use? - Answer- WPA2
What command may be used to determine the network path between two locations? -
Answer- tracert
What technology provides the translation that assigns public IP addresses to privately
addressed systems that wish to communicate on the Internet? - Answer- Network
Address Translation (NAT)
What ports normally used by email systems? - Answer- 25, 110, 143
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller millyphilip. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $10.49. You're not tied to anything after your purchase.
Can Stuvia be trusted?
4.6 stars on Google & Trustpilot (+1000 reviews)
73918 documents were sold in the last 30 days
Founded in 2010, the go-to place to buy study notes for 14 years now