Sign in

Free CC sample questions

Real questions from the Certified in Cybersecurity practice bank, with the correct answer and an explanation for each one. No junk, no filler.

Try them in the simulator Same questions, with study, timed and flashcard modes.

Showing 10 of 20 free sample questions.

Question 1Choose one

A security consultant is explaining the concept of defense-in-depth to a client. The client recently installed a biometric scanner (Physical Control) and a firewall (Technical Control). To complete the triad of security control categories, which of the following should be implemented?

Question 2Choose one

An ISC2 member discovers that their employer is unknowingly releasing software that contains a critical safety flaw which could endanger human lives. The employer refuses to delay the release due to financial pressure. According to the ISC2 Code of Ethics, which canon must the member prioritize above all others?

Question 3Choose 2

A user logs into a banking application using a password and a one-time code sent to their mobile phone. Which two authentication factors are being utilized in this scenario? (Select TWO)

Question 4Choose one

A healthcare provider sends a digitally signed email to a patient containing medical records. The patient uses the provider's public key to verify the signature. This process primarily ensures which security concept?

Question 5Choose one

True or False: In the context of risk management, 'Risk Appetite' refers to the specific amount of loss an organization can objectively endure without failing, whereas 'Risk Tolerance' is the broader strategic level of risk they are willing to take.

Question 6Choose one

Which of the following scenarios best illustrates the 'Integrity' component of the CIA Triad?

Question 7Choose one

A multinational corporation must comply with the General Data Protection Regulation (GDPR). They are appointing a specific role responsible for determining the purposes and means of processing personal data. What is this role called?

Question 8Choose one

An organization is conducting a quantitative risk assessment. They determine that a specific server fails once every 4 years. The replacement cost of the server is $10,000. What is the Annualized Loss Expectancy (ALE)?

Question 9Choose one

Case Study: TechSecure Inc. TechSecure Inc. is a mid-sized software development company moving its primary operations to a cloud environment. They handle sensitive customer PII. The CISO has mandated a review of all access controls. Currently, developers have full admin access to production servers to 'fix issues quickly', which violates security best practices. The company wants to implement a system where permissions are assigned based on job function rather than individual identity. Based on the scenario, which access control model should TechSecure Inc. implement to best address the CISO's requirement for function-based permissions?

Question 10Choose one

Case Study: TechSecure Inc. Referring to the TechSecure scenario: The developers currently having full admin access to production violates which fundamental security principle?

10 more free samples are waiting

Create a free account to unlock the whole CC sample bank, or get full access to all 220 practice questions in the simulator.

Create account