ISC2 CC

Asset Protection and Security Testing

12 of 60 questions in the app

Asset management

  1. Why is a complete inventory of all devices and software important? Easy
  2. Which phase belongs to the life cycle of an IT asset? Easy
  3. What does end of life (EOL) mean for software? Easy

Configuration management

  1. What is meant by hardening a system? Easy
  2. What is a configuration baseline? Easy

Change management

  1. What is a change management process for? Easy
  2. Why does every change need a rollback plan? Easy

Vulnerability management

  1. What is a patch? Easy

Asset management

  1. Which details belong in a good IT asset inventory? Medium
  2. A company still runs some computers with an operating system that no longer receives updates. Which measures make sense? Medium

Vulnerability management

  1. A scan finds two vulnerabilities: CVSS 9.8 on an isolated test server without data, and CVSS 7.5 on the public web shop, for which the CISA KEV catalog lists active attacks. Which is fixed first? Hard
  2. A company applies patches only once a year to avoid outages. What problems arise? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications