ISC(2)

Steve is a security practitioner assigned to come up with a protective measure for ensuring cars don’t collide with pedestrians. What is probably the most effective type of control for this task? (D1, L1.3.1)

• A. Administrative
• B. Technical
• C. Physical
• D. Nuanced

Chad is a security practitioner tasked with ensuring that the information on the organization’s public website is not changed by anyone outside the organization.This task is an example of ensuring _. (D1, L1.1.1)

• A. Confidentiality
• B. Integrity
• C. Availability
• D. Confirmation

Which of the following is an example of a “something you know” authentication factor? (D1, L1.1.1)

• A. User ID
• B. Password
• C. Fingerprint
• D. Iris scan

Which of the following is an example of a “something you are” authentication factor? (D1, L1.1.1)

• A. A credit card presented to a cash machine
• B. Your password and PIN
• C. A user ID
• D. A photograph of your face

A system that collects transactional information and stores it in a record in order to show which users performed which actions is an example of providing _. (D1,L1.1.1)

• A. Non-repudiation
• B. Multifactor authentication
• C. Biometrics
• D. Privacy

The European Union (EU) law that grants legal protections to individual human privacy is. (D1, L1.1.1)

• A. The Privacy Human Rights Act
• B. The General Data Protection Regulation
• C. The Magna Carta
• D. The Constitution

For which of the following systems would the security concept of availability probably be most important? (D1, L1.1.1)

• A. Medical systems that store patient data
• B. Retail records of past transactions
• C. Online streaming of camera feeds that display historical works of art in museums around the world
• D. Medical systems that monitor patient condition in an intensive-care unit

For which of the following assets is integrity probably the most important security aspect? (D1, L1.1.1)

• A. One frame of a streaming video
• B. The file that contains passwords used to authenticate users
• C. The color scheme of a marketing website
• D. Software that checks the spelling of product descriptions for a retail website

In risk management concepts, a(n) is something a security practitioner might need to protect. (D1, L1.2.1)

• A. Vulnerability
• B. Asset
• C. Threat
• D. Likelihood

In risk management concepts, a(n) is something or someone that poses risk to an organization or asset. (D1, L1.2.1)

• A. Fear
• B. Threat
• C. Control
• D. Asset