ISC2 CC

Data Security and Cryptography

12 of 60 questions in the app

Data handling

  1. What is data classification for? Easy
  2. What does labeling data mean? Easy
  3. In which three states must data be protected? Easy
  4. What is data masking? Easy
  5. What does sanitization of storage media mean? Easy
  6. Why should data not be kept longer than necessary? Easy

Encryption

  1. What characterizes symmetric encryption? Easy
  2. What characterizes asymmetric encryption? Easy

Data handling

  1. Which media sanitization methods does NIST SP 800-88 distinguish? Medium
  2. Why is degaussing unsuitable for SSDs? Medium

Encryption

  1. Alice wants to send Bob a file. Bob should be sure that it comes from Alice, and nobody else should be able to read it. Which keys are needed? Hard
  2. A company encrypts its database with AES-256 but stores the key in a configuration file on the same server. An attacker gains root access. How well is the data protected? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications