A software company stores user passwords in a database. They want to protect passwords even if the database is breached. Which approach is most secure?

Encrypt passwords with AES-256 and store the key in the application code.

Store a salted hash of each password using a strong hashing algorithm like bcrypt.

Use a simple hash like MD5 without salt.

Store passwords in plaintext for simplicity.

A system administrator wants to ensure that a downloaded software installer has not been tampered with. The vendor provides a checksum on their website. Which action should the administrator take?

Encrypt the downloaded file and compare the encrypted size.

Compute the hash of the downloaded file and compare it to the vendor's checksum.

Run the installer and see if it works.

Check the file's digital signature using the vendor's private key.

Which method is considered secure for destroying data on a magnetic hard drive?

Deleting files and emptying the recycle bin

What primarily determines how long data should be retained?

Legal, regulatory, and business requirements

Certified in Cybersecurity

Domain 5Objective 1

5.1 - Understand Data Security CC Practice Questions (Page 5)

Part of the Security Operations domain, which accounts for 18% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~9–14 in this domain), expect 2–4 from this objective — we provide 35 practice questions to prepare you well beyond it. (estimate)

35questions here

7free pages

9concepts

18%of the exam

Questions 21–25

21expert · hard
A software company stores user passwords in a database. They want to protect passwords even if the database is breached. Which approach is most secure?
Select an answer first
22foundation · easy
Which tool is commonly used to aggregate and analyze security logs from multiple sources?
Select an answer first
23application · easy
A system administrator wants to ensure that a downloaded software installer has not been tampered with. The vendor provides a checksum on their website. Which action should the administrator take?
Select an answer first
24foundation · easy
Which method is considered secure for destroying data on a magnetic hard drive?
Select an answer first
25foundation · easy
What primarily determines how long data should be retained?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.