CC practice questions — 10 free

An IPv6 address is a 128-bit address represented as a sequence of eight groups of 16-bit hexadecimal values. An IPv4 address is a 32-bit address represented as a sequence of four 8-bit integers. A Mac address is a 48-bit address represented as six groups of 8 bits values in hexadecimal. A web address consists of a protocol name, a server address, and a resource path (see ISC2 Study Guide, chapter 4, module 1 - Understand Computer Networking).

Security posters are used to raise the awareness of employees regarding security threats, and thus are primarily employed in Security Awareness (see ISC2 Study Guide, chapter 5, module 4).

A Business Continuity Plan (BCP) is a pre-determined set of instructions describing how an organization's mission or business processes will be sustained during and after a significant disruption (see Chapter 2 ISC2 Study Guide, module 4, under Terms and Definitions). A Business Impact Analysis (BIA) is a method of analyzing how disruptions can affect an organization. A Disaster Recovery Plan is used to recover systems after a major failure or disaster. The term 'Business Impact Plan' does not exist in Cybersecurity.

ISO 27002 is a supplementary standard aimed at guiding implementation controls in order to maintain security controls for Information Security Management Systems (ISMS), as defined in ISO 27001. Among many other aspects, these security controls comprise application security. Risk management is an activity that is touched on in this standard, but is not its primary focus (it is the focus of the ISO 31000 standard). HIPAA is the United States law that governs the privacy of healthcare information.

Emergency exit doors are a critical physical control designed to ensure safe and rapid evacuation during emergencies such as fires or earthquakes. These doors are typically clearly marked, unobstructed, and may include panic bars to allow easy exit without special knowledge or tools. Fire alarms alert occupants, exit signs provide direction, and emergency lighting improves visibility, but none of these physically enable evacuation. Exit doors directly support life safety by allowing people to leave the building quickly and safely. Life safety is the highest priority in physical security design, and exit doors are mandatory under building and fire safety codes.

Availability ensures that authorized users can access information and systems when needed, a core element of the CIA triad.

ABAC uses centralized policy engines (PDPs) to evaluate attributes and enforce fine-grained access control decisions dynamically.

An executive summary conveys the plan's goals, scope, recovery strategy, and key decision points in the shortest possible form, without going into technical detail — exactly the form suited to giving leadership an overall view.

A breach refers to unauthorized access to, acquisition of, or disclosure of a system or system resource — the boundary has already been crossed and something that should not have been obtained was obtained. Whether something qualifies as a breach is judged by "unauthorized" plus "actual contact with the resource."

The direct path to a data breach is someone reading data they should not be able to read. What blocks that path is logical control (also called technical control) — authentication, permission checks, encryption, and DLP, mechanisms implemented through software and configuration. The question asks about a category of control, and the answer falls into this category.