Free ISC CC Practice Exam with Questions & Answers | Set: 7

Encryption ensures confidentiality by rendering data unreadable to unauthorized users, whether at rest or in transit.

A zero-day vulnerability is a security flaw that is unknown to the vendor and defenders at the time it is discovered or exploited. Because there is no patch available, organizations have “zero days” to fix it.

A disaster recovery team typically includes executive leadership, IT personnel, legal representatives, and public relations staff. These roles are critical for decision-making, technical recovery, and external communication.

A billing clerk is unlikely to be part of the disaster recovery team because the role does not typically contribute to recovery strategy, system restoration, or crisis communication.

Multitenancy allows shared infrastructure while maintaining logical isolation between customers.

A guard dog deters unauthorized access by increasing perceived risk. Deterrent controls discourage attacks before they occur.

Load balancing improves availability by distributing traffic across multiple systems, preventing overload and downtime.

Double dealing is not a recognized social engineering technique. The others involve manipulating individuals to disclose information or perform actions.

Risk acceptance acknowledges the risk and chooses to proceed without additional controls, often due to cost or low impact.

Criticality reflects how essential an asset or system is to business success or mission accomplishment. It is commonly determined during a Business Impact Analysis (BIA) and influences recovery priorities.

Criticality reflects how essential an asset is to business operations or mission success. It influences prioritization, recovery planning, and protection strategies.