What is the primary purpose of monitoring security events?

To replace the need for firewalls

To detect threats in real time and enable a rapid response

To store logs for compliance only

Why are hashes commonly used to store passwords?

Hashes are faster than encryption for all operations.

Hashes ensure the password is encrypted and can be sent over the network securely.

Hashes can be decrypted to recover the original password when needed.

Hashes allow the system to verify a password without storing it in plaintext.

What is a common principle of data retention?

Keep all data indefinitely to avoid compliance issues.

Retain data only as long as necessary for its purpose.

Retain data based on the storage administrator's preference.

Delete data immediately after use without any record.

A company wants to detect and respond to security incidents in real time. They collect logs from firewalls, servers, and applications, but the volume is too large for manual review. Which solution should they implement?

Store all logs in a spreadsheet for manual review.

Encrypt all logs and store them offline.

Deploy a SIEM system to aggregate, correlate, and alert on security events.

Disable logging to reduce data volume.

A small business wants to protect sensitive customer data stored on a local file server. The data is classified as 'confidential' and is accessed only by a few employees. The business wants a simple, fast encryption method that uses a single key for both encryption and decryption. Which approach should they choose?

Use a digital signature to encrypt the data.

Use RSA-2048 with each employee having a public and private key pair.

Use SHA-256 to encrypt the data and store the digest.

Use AES-256 with a shared secret key distributed to authorized employees.

Certified in Cybersecurity

Domain 5Objective 1

5.1 - Understand Data Security CC Practice Questions (Page 2)

Part of the Security Operations domain, which accounts for 18% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

18%of the exam

Questions 6–10

6foundation · easy
What is the primary purpose of monitoring security events?
Select an answer first
7foundation · easy
Why are hashes commonly used to store passwords?
Select an answer first
8foundation · easy
What is a common principle of data retention?
Select an answer first
9application · easy
A company wants to detect and respond to security incidents in real time. They collect logs from firewalls, servers, and applications, but the volume is too large for manual review. Which solution should they implement?
Select an answer first
10application · easy
A small business wants to protect sensitive customer data stored on a local file server. The data is classified as 'confidential' and is accessed only by a few employees. The business wants a simple, fast encryption method that uses a single key for both encryption and decryption. Which approach should they choose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.