An online auction platform wants to ensure that bidders cannot deny placing a bid and that bids are not altered after submission. The platform currently stores the bid amount and timestamp in a database. Which additional control would best achieve both non-repudiation and integrity for each bid?

Encrypt the bid data with a symmetric key

Store the bid in a write-once read-many (WORM) storage

Use a digital signature on each bid

A hospital's patient portal must be available 24/7 for patients to book appointments. The IT team is considering two designs: (1) a single powerful server with a backup that is activated manually, or (2) a load-balanced cluster of two servers with automatic failover. The hospital has a limited budget but cannot afford downtime. Which design better meets the availability requirement?

Load-balanced cluster with automatic failover, because it minimizes downtime

Single server with manual backup, because it is cheaper

Load-balanced cluster, because it also improves confidentiality

Single server with manual backup, because it is simpler to manage

A healthcare organization requires remote clinicians to access patient records. To reduce the risk of credential theft, the security team mandates that access requires a one-time code generated by an authenticator app on the clinician's company-issued smartphone, in addition to the clinician's password. Which security concept is being strengthened by this requirement?

Availability, because the code ensures the system is always accessible

Non-repudiation, because the code ties the action to the device

Multi-factor authentication, because it combines something you know with something you have

Confidentiality, because the code encrypts the patient data

Certified in Cybersecurity

Domain 1Objective 1

1.1 - Understand the Security Concepts of Information Assurance CC Practice Questions (Page 5)

Part of the Security Principles domain, which accounts for 26% of the CC exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~13–21 in this domain), expect 3–4 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)

26questions here

6free pages

7concepts

26%of the exam

Questions 21–25

21expert · hard
An online auction platform wants to ensure that bidders cannot deny placing a bid and that bids are not altered after submission. The platform currently stores the bid amount and timestamp in a database. Which additional control would best achieve both non-repudiation and integrity for each bid?
Select an answer first
22expert · hard
A hospital's patient portal must be available 24/7 for patients to book appointments. The IT team is considering two designs: (1) a single powerful server with a backup that is activated manually, or (2) a load-balanced cluster of two servers with automatic failover. The hospital has a limited budget but cannot afford downtime. Which design better meets the availability requirement?
Select an answer first
23application · medium
A healthcare organization requires remote clinicians to access patient records. To reduce the risk of credential theft, the security team mandates that access requires a one-time code generated by an authenticator app on the clinician's company-issued smartphone, in addition to the clinician's password. Which security concept is being strengthened by this requirement?
Select an answer first
24application · medium
A law firm stores sensitive client documents in a cloud storage service. To ensure that only authorized attorneys can open the documents, the firm encrypts the files and requires each attorney to authenticate with a smart card and a PIN. Which information assurance goal is the encryption primarily protecting?
Select an answer first
25foundation · easy
Which security goal is primarily concerned with preventing unauthorized modification of data?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CC

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CC” is a trademark of its owner, used for identification only.

1.1 - Understand the Security Concepts of Information Assurance CC Practice Questions (Page 5)

Questions 21–25

An online auction platform wants to ensure that bidders cannot deny placing a bid and that bids are not altered after submission. The platform currently stores the bid amount and timestamp in a database. Which additional control would best achieve both non-repudiation and integrity for each bid?

Which security goal is primarily concerned with preventing unauthorized modification of data?

Keep studying — Security Principles