https://community.isc2.org/t5/Tech-Talk/CC-Exam-updated-Questions/m-p/89346#M5423 <P>Q1 : A company wants to ensure users only have access to the resources necessary for their job roles.<BR />What principle is being applied?</P><P>&nbsp;</P><P>A. Defense in depth<BR />B. Least privilege<BR />C. Separation of duties<BR />D. Zero trust</P><P>Answer: B</P><P>&nbsp;</P><P>Q2 : Which control type is a firewall considered?</P><P>&nbsp;</P><P>A. Administrative<BR />B. Physical<BR />C. Technical<BR />D. Detective</P><P>Answer<STRONG>:</STRONG> C</P><P>&nbsp;</P><P>Q3 : An employee clicks a malicious link that installs malware. What type of attack is this?</P><P>&nbsp;</P><P>A. Phishing<BR />B. Social engineering<BR />C. Malware injection<BR />D. Insider threat</P><P>Answer<STRONG>:</STRONG> A</P><P>&nbsp;</P><P>Q4 : What is the FIRST step in incident response?</P><P>&nbsp;</P><P>A. Containment<BR />B. Identification<BR />C. Eradication<BR />D. Recovery</P><P>Answer<STRONG>:</STRONG> B</P><P>&nbsp;</P><P>Q5 : Which of the following BEST ensures data can be recovered after a disaster?</P><P>&nbsp;</P><P>A. Encryption<BR />B. Backups<BR />C. Access control<BR />D. Monitoring</P><P>Answer: B</P><P>&nbsp;</P> Wed, 22 Apr 2026 08:33:12 GMT cecefeg 2026-04-22T08:33:12Z https://community.isc2.org/t5/Tech-Talk/CC-Exam-updated-Questions/m-p/89346#M5423 <P>Q1 : A company wants to ensure users only have access to the resources necessary for their job roles.<BR />What principle is being applied?</P><P>&nbsp;</P><P>A. Defense in depth<BR />B. Least privilege<BR />C. Separation of duties<BR />D. Zero trust</P><P>Answer: B</P><P>&nbsp;</P><P>Q2 : Which control type is a firewall considered?</P><P>&nbsp;</P><P>A. Administrative<BR />B. Physical<BR />C. Technical<BR />D. Detective</P><P>Answer<STRONG>:</STRONG> C</P><P>&nbsp;</P><P>Q3 : An employee clicks a malicious link that installs malware. What type of attack is this?</P><P>&nbsp;</P><P>A. Phishing<BR />B. Social engineering<BR />C. Malware injection<BR />D. Insider threat</P><P>Answer<STRONG>:</STRONG> A</P><P>&nbsp;</P><P>Q4 : What is the FIRST step in incident response?</P><P>&nbsp;</P><P>A. Containment<BR />B. Identification<BR />C. Eradication<BR />D. Recovery</P><P>Answer<STRONG>:</STRONG> B</P><P>&nbsp;</P><P>Q5 : Which of the following BEST ensures data can be recovered after a disaster?</P><P>&nbsp;</P><P>A. Encryption<BR />B. Backups<BR />C. Access control<BR />D. Monitoring</P><P>Answer: B</P><P>&nbsp;</P> Wed, 22 Apr 2026 08:33:12 GMT https://community.isc2.org/t5/Tech-Talk/CC-Exam-updated-Questions/m-p/89346#M5423 cecefeg 2026-04-22T08:33:12Z https://community.isc2.org/t5/Tech-Talk/CC-Exam-updated-Questions/m-p/89350#M5425 <a href="https://community.isc2.org/t5/user/viewprofilepage/user-id/994052667">@kedeho8713</a>. This is a dump site and should not be used. Anyone who posts or advocates use of a dump site risks losing Community access and/or their certification. Wed, 22 Apr 2026 10:55:40 GMT https://community.isc2.org/t5/Tech-Talk/CC-Exam-updated-Questions/m-p/89350#M5425 nkeaton 2026-04-22T10:55:40Z