ISC2 CC Practice Test

Answer choices

1. A. Grant the same access as pharmacists but require MFA, for the described technical objective and its associated operational control requirements, as proposed.
2. B. Define the pharmacy-technician role and its required entitlements from job responsibilities before provisioning accounts.
3. C. Clone the least-active pharmacist account and remove permissions when complaints occur, under the documented operational and governance requirements.
4. D. Provision no access and let each technician request individual permissions over time, within the described operational context.

Wrong-answer review

• A. Grant the same access as pharmacists but require MFA, for the described technical objective and its associated operational control requirements, as proposed.: Stronger authentication does not correct excessive authorization.
• C. Clone the least-active pharmacist account and remove permissions when complaints occur, under the documented operational and governance requirements.: Cloning an unrelated senior role perpetuates unknown excess privilege.
• D. Provision no access and let each technician request individual permissions over time, within the described operational context.: A default-deny start can be safe, but without role definition it creates inconsistent access and manual entitlement sprawl.

Answer choices

1. A. Change the tablet screen timeout, for the described technical objective and its associated operational control requirements, within this context.
2. B. Increase Wi-Fi encryption strength, for the described technical objective and its associated operational control requirements, for the specified implementation requirement.
3. C. Move the tablets to a different IP subnet, under the organization’s defined implementation and exception-management process.
4. D. Disable or restrict Bluetooth discoverability and functionality after the approved pairing use is complete, for the stated scenario.

Answer choices

1. A. The tool will infer perfect least-privilege roles from login history, for the described technical objective and its associated operational control requirements, as selected.
2. B. The tool will automate inconsistent decisions because governance rules and lifecycle ownership must be defined before automation is reliable, for the described technical objective.
3. C. All access risk transfers to the IAM vendor, for the described technical objective and its associated operational control requirements, as selected.
4. D. MFA will compensate for undefined roles and approval ownership, for the stated identity and access management (iam) concepts (20%) requirement.

Answer choices

1. A. Use only the controls already supported by existing tools, for the stated security, delivery, and accountability requirements.
2. B. Treat the framework as optional guidance and avoid documenting deviations, within the documented scope, ownership, and validation boundaries.
3. C. Implement every possible control at the strongest setting regardless of operational impact, as the primary implementation for the described business requirement.
4. D. Tailor the framework to the provider's risk, mission and obligations while preserving traceability to the framework outcomes, for this requirement.

Answer choices

1. A. The notices provide authorization because entrants were warned before entering, as the recommended implementation across the complete governed service lifecycle.
2. B. The primary missing control is data encryption on systems inside the room, for the described technical objective and its associated operational control requirements, within this context.
3. C. The cameras are sufficient because detective controls are equivalent to preventive controls, under the described security principles (24%) criteria.
4. D. The visible monitoring may deter and detect, but an enforcing physical control is still needed to prevent unauthorized entry, within the security principles (24%) context.

Answer choices

1. A. Suppress the detection permanently because the destination is internal, under the documented operational and governance requirements.
2. B. Immediately rebuild the database server from a clean image, under the organization’s defined implementation and exception-management process.
3. C. Validate the event against asset context, approved changes, and related telemetry before declaring an incident, for the required operational result and control objective.
4. D. Treat the data volume alone as proof of exfiltration and initiate public breach notification, under the documented operational and governance requirements.

Answer choices

1. A. Use a single VPN tunnel between all workloads, for the described technical objective and its associated operational control requirements, under this approach.
2. B. Place every workload behind one internet-facing perimeter firewall and allow all internal traffic, for the described technical objective and its associated operational control requirements, for this scenario.
3. C. Use workload-aware microsegmentation or policy enforcement that restricts east-west communication to defined service relationships, as the proposed networking and cloud security concepts (21.3%) approach.
4. D. Assign each workload a public IP so flows are easier to identify, within the networking and cloud security concepts (21.3%) context.

Answer choices

1. A. Authenticate the user with MFA and skip further authorization, within the defined security and accountability boundaries.
2. B. Assign one static role to every researcher and allow all project datasets, under the documented operational and governance requirements.
3. C. Use discretionary access controlled only by the dataset creator, under the proposed approach.
4. D. Use policy that evaluates subject, resource and environmental attributes at access time, as configured.

Answer choices

1. A. Escalate the threshold breach through the defined governance process and assess corrective actions or risk acceptance, for the required outcome.
2. B. Delete suppliers with expired attestations from the metric, under the organization’s defined implementation and exception-management process.
3. C. Wait until a supplier incident occurs before escalating, for the described technical objective and its associated operational control requirements, for the required outcome.
4. D. Change the threshold to 12% so the dashboard returns to green, for the described technical objective and its associated operational control requirements.

Answer choices

1. A. Permit read-only access because viewing a signing key cannot affect integrity, for the described technical objective and its associated operational control requirements.
2. B. Rely on repository audit logs and investigate any misuse afterward, within the documented scope, ownership, and validation boundaries.
3. C. Require the developer to reauthenticate before every repository read, for the required operational result and control objective.
4. D. Authorize access based on the release-engineer role rather than treating engineering-group membership as sufficient, for the specified implementation requirement.