CC 試験練習問題

B

Correct answer: Acting honorably and legally Acting honorably and legally requires members to be honest and truthful in all professional dealings. By disclosing her stock ownership and recusing herself from the audit, she ensures that her professional reputation and the integrity of the report remain intact. Protecting society and the common good focuses on public safety rather than specific business conflicts. Providing diligence and competence to principals primarily focuses on the quality and performance of the work completed. Advancing and protecting the profession is promoting the growth of the security community through mentoring and knowledge-sharing.Certified in Cybersecurity Study Guide, 1st Edition (ISBN: 978-1394213832). Pg 52. Certified in Cybersecurity All-in-One Exam Guide, 1st Edition (ISBN: 978-1265203818). Pg 40.

D

Correct answer: Administrative controls such as updating the password policy Updating the password policy is an administrative control that addresses the risk of unauthorized access by strengthening password requirements. Physical controls like reinforced doors and windows do not directly address data access. Installing antivirus software is a technical control that protects against malware, not weak passwords. Hiring security guards is a physical control that does not address data access issues.Certified in Cybersecurity Study Guide, 1st Edition (ISBN: 978-1394213832). Pg 45-47. Certified in Cybersecurity All-in-One Exam Guide, 1st Edition (ISBN: 978-1265203818). Pg 31-32.

A

Correct answer: Implementing multifactor authentication Work factor is the amount of time and resources an adversary must expend to overcome a security control. Implementing multifactor authentication (MFA) adds additional layers of defense that force an attacker to bypass multiple distinct types of credentials, increasing the work factor. Installing an intrusion detection system identifies and alerts to activity rather than directly increasing the difficulty of the breach. Conducting monthly audits of logs is an administrative or detective control. Documenting configuration changes is an administrative control.Certified in Cybersecurity All-in-One Exam Guide, 1st Edition (ISBN: 978-1265203818). Pg 33.

A

Correct answer: A company’s executive digitally signs an email that authorizes a $100,000 transfer. Non-repudiation is illustrated because the executive’s digital signature provides proof they authorized the transfer. It prevents the sender from denying their involvement in the transaction. Encryption protects confidentiality; it does not prevent an actor from denying involvement in an action. Phishing emails are an example of credential theft, not proof of origin. Intercepting a software update to include malware demonstrates integrity compromise, not non-repudiation.Certified in Cybersecurity Study Guide, 1st Edition (ISBN: 978-1394213832). Pg 7-8. Certified in Cybersecurity All-in-One Exam Guide, 1st Edition (ISBN: 978-1265203818). Pg 7.

C

Correct answer: Sharing confidential client information with a colleague who is not authorized Sharing confidential information with unauthorized individuals is a breach of the (ISC)² Code of Ethics, which mandates that professionals protect sensitive information and maintain confidentiality. Conducting a security audit within approved guidelines is an ethical and professional practice. Continuing education supports the ethical standard of competence and diligence. Reporting a suspected breach to the appropriate team aligns with ethical responsibilities to protect the organization.Certified in Cybersecurity Study Guide, 1st Edition (ISBN: 978-1394213832). Pg 52-53. Certified in Cybersecurity All-in-One Exam Guide, 1st Edition (ISBN: 978-1265203818). Pg 38-40.