Certified in Cybersecurity (CC): Full Coverage Mastery Exam 1

In a system, Alice, a programmer, attempts to access a code repository. In terms of access control, how would Alice and the code repository be classified?

• Alice is the object, the code repository is the subject

• Alice is the subject, the code repository is the object

• Both Alice and the code repository are subjects

• Both Alice and the code repository are objects

As an IT manager at a financial institution, you are designing a system to ensure that any transaction made cannot be denied by the party making it. This security measure is known as:

• Confidentiality

• Non-repudiation

• Authorization

• Encryption

In a financial company, a system requires both the manager and the accountant to simultaneously use their access codes to transfer funds exceeding $10,000. What security concept does this scenario illustrate?

• Defense in depth

• Principle of least privilege

• Two-person integrity

• Mandatory Access Control (MAC)

You've just discovered that an unknown attacker has obtained unauthorized access to your company's client database. This situation is best defined as:

• Exploit

• Breach

• Intrusion

• Zero Day

The IT team at XYZ Corp is working on identifying potential threats to their network. They are also assessing the impact of these threats and planning how to respond if any of these threats occur. What is the IT team engaged in?

• Risk Management

• Incident Response

• Asset Management

• Compliance Management

In the context of user authentication, which factors typically fall under the categories of "something you are" and "something you have"?

• Username and password

• Fingerprint and mobile phone

• Security questions and PIN

• Smart card and email address

A company implements multiple layers of security controls, including firewalls, intrusion detection systems, encryption, and regular security awareness training for employees. This approach is an example of:

• Defense in Depth

• Least Privilege

• Separation of Duties

• Single Sign-On

An organization wants to ensure that a message sent over the internet cannot be read if intercepted. What technique should they use?

• Encryption

• Tokenization

• Authentication

• Authorization

As a cybersecurity analyst, your supervisor instructs you to create a document outlining the step-by-step process for configuring firewall rules in the organization's network infrastructure. What type of document are you creating?

• Policy

• Procedure

• Standard

• Guideline

In risk management, the term "impact" refers to:

• Confidentiality

• The severity or consequences of a risk event

• The potential vulnerabilities in a system or process

• The actions taken to transfer or mitigate risks