A company's security policy requires that all laptops be encrypted. The IT department is responsible for implementing this policy. What should the IT department use to ensure that all laptops are encrypted consistently?

A regulation that mandates laptop encryption.

A new policy that reiterates the encryption requirement.

A standard that specifies the encryption software and settings.

A procedure that describes how to enable encryption on each laptop.

What is the primary purpose of a security standard within an organization?

To define specific technical or operational requirements that support policy

To provide high-level direction and principles

To describe step-by-step instructions for a task

To list the penalties for non-compliance

What distinguishes a regulation from a law in the context of organizational governance?

Regulations are created by regulatory bodies to implement laws, while laws are enacted by legislative bodies

Regulations apply only to government agencies, while laws apply to private organizations

Regulations are internal documents, while laws are external requirements

Regulations are voluntary, while laws are mandatory

What is the primary role of an organizational policy in a governance framework?

To list legal penalties for non-compliance

To provide step-by-step instructions for performing a task

To establish high-level direction and rules for the organization

To specify exact technical configurations for systems

A company's security policy requires all employees to use a VPN when working remotely. However, the help desk receives frequent complaints that employees are unsure how to connect to the VPN. What should the security team create to address this issue?

A regulation that mandates VPN usage for remote work.

A procedure that provides step-by-step instructions for connecting to the VPN.

A new policy that reiterates the VPN requirement.

A standard that specifies the VPN encryption protocol.

Certified in Cybersecurity

Domain 1Objective 5

1.5 - Understand Governance Processes CC Practice Questions (Page 1)

Part of the Security Principles domain, which accounts for 26% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–21 in this domain), expect 3–4 from this objective — we provide 16 practice questions to prepare you well beyond it. (estimate)

16questions here

4free pages

4concepts

26%of the exam

Questions 1–5

1application · medium
A company's security policy requires that all laptops be encrypted. The IT department is responsible for implementing this policy. What should the IT department use to ensure that all laptops are encrypted consistently?
Select an answer first
2foundation · easy
What is the primary purpose of a security standard within an organization?
Select an answer first
3foundation · easy
What distinguishes a regulation from a law in the context of organizational governance?
Select an answer first
4foundation · easy
What is the primary role of an organizational policy in a governance framework?
Select an answer first
5application · medium
A company's security policy requires all employees to use a VPN when working remotely. However, the help desk receives frequent complaints that employees are unsure how to connect to the VPN. What should the security team create to address this issue?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.