A company needs to securely exchange encrypted messages with an external partner. The partner does not have a pre-shared key, and the company wants to avoid the complexity of securely distributing a shared secret. Which cryptographic approach should they use?

Use asymmetric encryption: the partner encrypts the message with the company's public key, and the company decrypts with its private key.

Use hashing to encrypt the message and send the hash.

Use a digital signature to encrypt the message.

Use symmetric encryption with a key sent over email.

A hospital is decommissioning an MRI machine that contains a hard drive with patient records. The data is classified as 'restricted' and must be destroyed to prevent unauthorized recovery. The hospital wants to reuse the hard drive in another machine. Which destruction method is most appropriate?

Format the hard drive with a quick format.

Overwrite the hard drive with multiple passes of random data.

Physically shred the hard drive.

A security operations center (SOC) is investigating a potential data breach. The analyst needs to determine what actions an attacker performed on a compromised server. Which type of data is most critical for this investigation?

The organization's data classification policy.

A list of all employees and their job titles.

The server's hardware inventory list.

Security event logs that record user logins, process executions, and file access.

Certified in Cybersecurity

Domain 5Objective 1

5.1 - Understand Data Security CC Practice Questions (Page 1)

Part of the Security Operations domain, which accounts for 18% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

18%of the exam

Questions 1–5

1foundation · easy
Which of the following is a common symmetric encryption algorithm?
Select an answer first
2application · easy
A company needs to encrypt a large database backup file before storing it in the cloud. The encryption must be fast and use a single key. Which algorithm is most appropriate?
Select an answer first
3application · medium
A company needs to securely exchange encrypted messages with an external partner. The partner does not have a pre-shared key, and the company wants to avoid the complexity of securely distributing a shared secret. Which cryptographic approach should they use?
Select an answer first
4application · medium
A hospital is decommissioning an MRI machine that contains a hard drive with patient records. The data is classified as 'restricted' and must be destroyed to prevent unauthorized recovery. The hospital wants to reuse the hard drive in another machine. Which destruction method is most appropriate?
Select an answer first
5application · easy
A security operations center (SOC) is investigating a potential data breach. The analyst needs to determine what actions an attacker performed on a compromised server. Which type of data is most critical for this investigation?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.

5.1 - Understand Data Security CC Practice Questions (Page 1)

Questions 1–5

Which of the following is a common symmetric encryption algorithm?

A company needs to encrypt a large database backup file before storing it in the cloud. The encryption must be fast and use a single key. Which algorithm is most appropriate?

A company needs to securely exchange encrypted messages with an external partner. The partner does not have a pre-shared key, and the company wants to avoid the complexity of securely distributing a shared secret. Which cryptographic approach should they use?

A hospital is decommissioning an MRI machine that contains a hard drive with patient records. The data is classified as 'restricted' and must be destroyed to prevent unauthorized recovery. The hospital wants to reuse the hard drive in another machine. Which destruction method is most appropriate?

A security operations center (SOC) is investigating a potential data breach. The analyst needs to determine what actions an attacker performed on a compromised server. Which type of data is most critical for this investigation?

Keep studying — Security Operations