CC 試験練習問題

B

Correct answer: To identify and alert on security incidents after they have occurred Detective controls are designed to identify and alert on security incidents or anomalies that have already occurred. They help detect breaches or suspicious activities so that the organization can respond appropriately. Preventing security incidents is the role of preventive controls. Repairing damage is the function of corrective controls. Establishing rules and guidelines is the role of directive controls.Certified in Cybersecurity All-in-One Exam Guide, 1st Edition (ISBN: 978-1265203818). Pg 36-38. Certified in Cybersecurity Study Guide, 1st Edition (ISBN: 978-1394213832). Pg 45-47.

C

Correct answer: Falsifying security test results to meet client expectations Falsifying security test results is a direct violation of ethical standards, as it compromises the integrity of the findings and could lead to significant risks being ignored. Reporting conflicts of interest and informing stakeholders of vulnerabilities both align with ethical behavior. Disclosing vulnerabilities responsibly to the affected organization is part of responsible disclosure.Certified in Cybersecurity Study Guide, 1st Edition (ISBN: 978-1394213832). Pg 51-54. Certified in Cybersecurity All-in-One Exam Guide, 1st Edition (ISBN: 978-1265203818). Pg 38-40.

A

Correct answer: Integrity Integrity has been violated because trade confirmation records were altered without authorization. Integrity ensures that data remains accurate, complete, and trustworthy over time. Confidentiality involves unauthorized data disclosure, which is not indicated here. Availability would be compromised if the systems were unaccessible, which did not happen. Access control is a security mechanism, not one of the three primary cybersecurity objectives.Certified in Cybersecurity Study Guide, 1st Edition (ISBN: 978-1394213832). Pg 5-6. Certified in Cybersecurity All-in-One Exam Guide, 1st Edition (ISBN: 978-1265203818). Pg 4-5.

B

Correct answer: ISO The International Organization for Standardization (ISO) develops international standards, including ISO 27001, which focuses on the establishment, implementation, and maintenance of Information Security Management Systems (ISMS). National Institute of Standards and Technology (NIST) develops U.S. government standards and frameworks, such as the NIST Cybersecurity Framework. Payment Card Industry Security Standards Council (PCI SSC) is focused on protecting payment card information. Open Web Application Security Project (OWASP) is dedicated to web application security, not ISMS standards.Certified in Cybersecurity All-in-One Exam Guide, 1st Edition (ISBN: 978-1265203818). Pg 24-25. Certified in Cybersecurity Study Guide, 1st Edition (ISBN: 978-1394213832). Pg 59-62.

A

Correct answer: Badge reader Physical controls restrict access through tangible mechanisms that interact with the physical environment. Badge readers control entry to buildings or rooms by verifying physical credentials. A firewall is a technical control that filters network traffic. An intrusion detection system is a technical control that monitors systems and networks. Security awareness training is an administrative control focused on user behavior.Certified in Cybersecurity All-in-One Exam Guide, 1st Edition (ISBN: 978-1265203818). Pg 34-35.