Question 1

What phase of the incident response process is aimed at minimizing the impact or extent of an incident?

Options :

A : Containment

B : Response

C : Detection

D : Recovery

Answer: A

Question 2

Data at rest is TYPICALLY vulnerable to which type of security risk? (★)

Options :

A : Decryption

B : Inadequate classification

C : Data breach

D : Loss of integrity

Answer: C

Question 3

Which ISC2 Code of Ethics Canon focuses on a security analyst's responsibility to prevent harm and maintain public well-being?

Options :

A : Act honorably, honestly, justly, responsibly, and legally

B : Advance and protect the profession

C : Protect society, the common good, necessary public trust and confidence, and the infrastructure

D : Provide diligent and competent service to principals

Answer: C

Question 4

What best describes the PRIMARY objective of a data retention policy?

Options :

A : To preserve data indefinitely

B : To specify how long information and assets should be retained

C : To ensure that data is retained for at least five years

D : To delineate areas outside the scope of time-based data management

Answer: B

Question 5

What is the purpose of a risk assessment?

Options :

A : To evaluate the potential impact of threats to the organization

B : To define recovery time objectives for critical systems and data

C : To establish procedures for restoring critical systems and data

D : To identify critical business functions

Answer: A

Free CC Mock Exam – Practice Online Confidently