Chad is a security practitioner tasked with ensuring that the information on the organization's public website is not changed by anyone outside the organization. Which concept does this task demonstrate?

Which of the following is an example of a 'Something you know' authentication factor?

Which of the following is an example of a 'Something you are' authentication factor?

A system collects transactional information and stores it in a record in order to show which users performed which actions. Which concept does this demonstrate?

What is the European Union (EU) law that grants legal protections to individual human privacy?

For which of the following systems would the security concept of availability be considered MOST important?

For which of the following assets is integrity probably the MOST important security aspect?

In risk management, which concept reflects something a security practitioner might need to protect?

In risk management concepts, what is something or someone that poses risk to an organization or asset?

Of the following, which would probably NOT be considered a threat?

Which of the following probably poses the MOST risk?

Within the organization, who can identify risk?

Kerpak works in the security office of a medium-sized entertainment company. Kerpak is asked to assess a particular threat, and he suggests that the best way to counter this threat would be to purchase and implement a particular security solution. What concept does Kerpak's solution demonstrate?

Fill in the missing word: Sophia is visiting Las Vegas and decides to put a bet on a particular number on a roulette wheel. This is an example of _________.

Phrenal is selling a used laptop in an online auction. Phrenal has estimated the value of the laptop to be $100, but has seen other laptops of similar type and quality sell for both more and less than that amount. Phrenal hopes that the laptop will sell for $100 or more, but is prepared to take less for it if nobody bids that amount. What concept does this demonstrate?

A software firewall is an application that runs on a device and prevents specific types of traffic from entering that device. Which type of control is this?

At the airport, there are red lines painted on the ground next to the runway, which prohibits traffic from crossing it. Which type of control does this exemplify?

A bollard is a post set securely in the ground in order to prevent a vehicle from entering an area or driving past a certain point. Bollards are an example of which type of control?

Druna is a security practitioner tasked with ensuring that laptops are not stolen from the organization's offices. Which kind of security control would probably be BEST for this purpose?

Triffid Corporation has a policy that all employees must receive security awareness instruction before using email; the company wants to make employees aware of potential phishing attempts that the employees might receive via email. What kind of control is this instruction?

ISC2 publishes a Common Body of Knowledge (CBK) that IT security practitioners should be familiar with; this is recognized throughout the industry as a valuable resource for practitioners. Certifications can be issued for demonstrating expertise in this Common Body of Knowledge. What kind of document is the Common Body of Knowledge?

The city of San Jose wants to ensure that all of its citizens are protected from malware, so the city council creates a rule that anyone caught creating and launching malware within the city limits will receive a fine and go to jail. What kind of rule is this?

The Triffid Corporation publishes a strategic overview of the company's intent to secure all the data the company possesses. This document is signed by Triffid's senior management. What kind of document is this?

San Jose municipal code requires that all companies operating within city limits have a set of processes to ensure that employees are safe while working with hazardous materials. Triffid Corporation creates a checklist of activities that employees must follow while working with hazardous materials inside San Jose city limits. The municipal code is a ______, and the Triffid checklist is a ________.

The Payment Card Industry (PCI) Council is a committee made up of representatives from major credit card providers (Visa, Mastercard, American Express) in the United States. The PCI Council issues rules that merchants must follow if the merchants choose to accept payment via credit card. These rules describe best practices for securing credit card processing technology, activities for securing credit card information, and how to protect personal data of customers. Which of the following describes this set of rules?

Hoshi is an ISC2 member who works for the Triffid Corporation as a data manager. Triffid needs a new firewall solution, and Hoshi is asked to recommend a product for Triffid to acquire and implement. Hoshi's cousin works for a firewall vendor; that vendor happens to make the best firewall available. What should Hoshi do?

Olaf is a member of ISC2 and a security analyst for Triffid Corporation. During an audit, Olaf is asked whether Triffid is currently following a particular security practice. Olaf knows that Triffid is not adhering to that standard in that particular situation, but that saying this to the auditors will reflect poorly on Triffid. What should Olaf do?

Aphrodite is a member of ISC2 and a data analyst for Triffid Corporation. While Aphrodite is reviewing user log data, Aphrodite discovers that another Triffid employee is violating the acceptable use policy and watching streaming videos during work hours. What should Aphrodite do?

You are reviewing log data from a router; there is an entry showing that a user sent traffic through the router at 11:45 a.m., local time, yesterday. Which of the following does this exemplify?

An attacker outside the organization attempts to gain access to the organization’s internal files. Which of the following does this scenario exemplify?

Who approves the incident response policy?

Which of the following are NOT typically involved in incident detection?

What is the goal of Business Continuity efforts?

Which of the following is likely to be included in the business continuity plan?

What is the MOST important goal of a business continuity effort?

What is the overall objective of a disaster recovery (DR) effort?

What is the risk associated with resuming full normal operations too soon after a DR effort?

What is the risk associated with delaying resumption of full normal operations after a disaster?

Gelbi is a Technical Support analyst for Triffid, Inc. Gelbi sometimes is required to install or remove software.

Which of the following could be used to describe Gelbi's account?

Guillermo logs on to a system and opens a document file. Guillermo is an example of what?

Which of the following is NOT an appropriate control to add to privileged accounts?

Prachi works as a database administrator for Triffid, Inc. Prachi is allowed to add or delete users, but is not allowed to read or modify the data in the database itself. When Prachi logs on to the system, an access control list (ACL) checks to determine which permissions he has.

In this situation, what is the ACL?

Prachi works as a database administrator for Triffid, Inc. Prachi is allowed to add or delete users, but is not allowed to read or modify the data in the database itself. When Prachi logs on to the system, an access control list (ACL) checks to determine which permissions he has.

In this situation, Prachi represents what?

Larry and Fern both work in the data center. In order to enter the data center to begin their workday, they must both present their own keys (which are different) to the key reader, before the door to the data center opens.

Which security concept is being applied in this situation?

Which of the following is a biometric access control mechanism?

Which of the following is the BEST recommendation for all individuals visiting a secure facility?

All of the following are typically perceived as drawbacks to biometric systems, except:

A human guard monitoring a hidden camera could be considered which type of control?

Which of the following is a record of something that has occurred?

Mila works for a government agency. All data in the agency is assigned a particular sensitivity level, called a classification. Every person in the agency is assigned a clearance level, which determines the classification of data each person can access and is controlled at the system level.

What is the access control model being implemented in Mila's agency?

Which of the following would be considered a logical access control?

Trina and Doug both work at Triffid, Inc. Doug is having trouble logging in to the network. Trina offers to log in for Doug, using her credentials, so that Doug can get some work done.

What is the problem with this?

Gary is unable to log in to the production environment. Gary tries three times and is then locked out of trying again for one hour. Why could this be?

Suvid works at Triffid, Inc. When Suvid attempts to log in to the production environment, a message appears stating that he has to reset his password. What may have occurred to cause this?

Prina is a database manager. Prina is allowed to add new users to the database, remove current users, and create new usage functions for the users. Prina is not allowed to read the data in the fields of the database itself. This is an example of what?

Handel is a senior manager at Triffid, Inc., and is in charge of implementing a new access control scheme for the company. Handel wants to ensure that operational managers have the utmost personal choice in determining which employees get access to which systems/data. Which method should Handel select?

Handel is a senior manager at Triffid, Inc., and is in charge of implementing a new access control scheme for the company. Handel wants to ensure that employees transferring from one department to another, getting promoted, or cross-training to new positions can get access to the different assets they'll need for their new positions, in the most efficient manner. Which method should Handel select?

Handel is a senior manager at Triffid, Inc., and is in charge of implementing a new access control scheme for the company. Handel wants to ensure that employees who are assigned to new positions in the company do not retain whatever access they had in their old positions. Which method should Handel select?

Which term refers to the logical address of a device connected to the network or internet?

What type of device filters network traffic in order to enhance overall security/performance?

What protocol should Barry use when he wants to upload a series of files to a web-based storage service?

A type of device typically accessed by multiple users and often intended for a single purpose, such as managing email or web pages, is referred to as what?

Carol is browsing the Web. Which of the following ports is she probably using?

Cyril wants to ensure all the devices on his company's internal IT environment are properly synchronized. Which of the following protocols would aid in this effort?

Ludwig is a security analyst at Triffid, Inc. Ludwig notices network traffic that might indicate an attack designed to affect the availability of the environment. Which of the following might be the attack Ludwig sees?

Gary is an attacker. Gary is able to get access to the communication wire between Dauphine's machine and Linda's machine and can then surveil the traffic between the two when they're communicating. What kind of attack is this?

Bert wants to add a flashlight capability to a smartphone. Bert searches the internet for a free flashlight app, and downloads it to the phone. The app allows Bert to use the phone as a flashlight, but also steals Bert's contacts list. What kind of app is this?

Triffid, Inc., has many remote workers who use their own IT devices to process Triffid's information. The Triffid security team wants to deploy some sort of sensor on user devices in order to recognize and identify potential security issues. Which of the following is probably most appropriate for this specific purpose?

Inbound traffic from an external source seems to indicate much higher rates of communication than normal, to the point where the internal systems might be overwhelmed. Which security solution can often identify and potentially counter this risk?

What tool aggregates log data from multiple sources, typically analyzes it, and reports potential threats?

What type of solution typically inspects outbound communications traffic to check for unauthorized exfiltration of sensitive/valuable information?

What type of tool is used to monitor local devices with the aim of reducing potential threats from hostile software?

Which activity is usually part of the configuration management process, but is also extremely helpful in countering potential attacks?

Which type of fire-suppression system is typically the SAFEST for humans?

Which common cloud service model offers the customer the MOST control of the cloud environment?

What is the section of the IT environment that is closest to the external world; where we locate IT systems that communicate with the Internet?

An IoT (Internet of Things) device is typically characterized by its effect on or use of which environment?

What type of device is commonly advisable to have on the perimeter between two networks?

Which of the following describes when archiving is typically done?

Which concept does this demonstrate? Every document owned by Triffid, Inc., whether hardcopy or electronic, has a clear, 24-point word at the top and bottom. Only three words can be used: 'Sensitive', 'Proprietary', and 'Public'.

To what data does security need to be provided?

Data retention periods apply to which kind of data?

What should be done when data has reached the end of the retention period?

Which of the following describes data that is left behind on systems/media after normal deletion procedures have been attempted?

Where should log data be kept?

What should security controls on log data reflect?

How often should logs be reviewed?

Dieter wants to send a message to Lupa and wants to be sure that Lupa knows the message has not been modified in transit. Which technique/tool could Dieter use to assist in this effort?

Triffid, Inc., wants to host streaming video files for the company's remote users, but wants to ensure that the data is protected while it's streaming. Which method is probably BEST for this purpose?

Which of the following is used to ensure that configuration management activities are effective and enforced?

What must an organization always be prepared to do when applying a patch?

Why is the proper alignment of security policy and business goals within the organization important?

An organization should keep on file a copy of every signed Acceptable Use Policy (AUP). To whom should a copy be issued?

What is the MOST crucial element of any security instruction program?

Which one of the following is a benefit of computer-based training (CBT)?

Which of the following describes the output of a hashing algorithm?

Hashing is often used to provide what?

If two people want to use asymmetric communication to conduct a confidential conversation, how many keys do they need?