Certified in Cybersecurity (CC) Practice Exam
Certified in Cybersecurity (CC) Practice Exam
About the Certified in Cybersecurity (CC) Exam
The Certified in Cybersecurity (CC) credential by ISC2 is designed for candidates new to the cybersecurity field, reflecting the growing trend of professionals entering cybersecurity without direct IT experience. Obtaining the Certified in Cybersecurity credential demonstrates to employers your solid grasp of essential technical concepts and your ability to learn on the job effectively.
Skills Acquired
The Certified in Cybersecurity (CC) credential validates your foundational knowledge, skills, and abilities, making you suitable for entry- or junior-level cybersecurity roles.
Who should take the exam?
By becoming Certified in Cybersecurity, you demonstrate to employers that you possess the foundational knowledge and enthusiasm necessary to join their cybersecurity teams. This certification is particularly beneficial for:
- IT professionals
- Individuals transitioning into cybersecurity from other fields
- College students or recent graduates
Ideal candidates for the Certified in Cybersecurity (CC) credential are:
- Problem solvers
- Creative thinkers
- Analytical and critical thinkers
- Enthusiastic about continuous learning opportunities
Exam Details
- Exam Duration: 2 hours
- Number of Questions: 100
- Exam Format: Multiple choice
- Passing Grade: 700 out of 1000 points
- Exam Languages: English, Chinese, Japanese, German
Course Outline
The Certified in Cybersecurity (CC) covers the following topics -
Domain 1: Security Principles
1.1 - Understand cybersecurity concepts
- Confidentiality
- Integrity
- Availability
- Authentication, Authorization, Accounting (AAA)
- Non-repudiation
- Privacy
1.2 - Understand risk management concepts
- Risk management lifecycle
- Risk management processes
1.3 - Understand governance concepts
- Regulations and laws
- Frameworks and guidelines
- Policies, standards (e.g., International Organization for Standardization (ISO), Center for Internet Security), procedures
1.4 - Understand cybersecurity controls
- Technical controls
- Administrative controls
- Physical controls
1.5 - Maintain professional and ethical conduct
- Professional code of conduct
- Due care and due diligence
- ISC2 Code of Ethics
Domain 2: Security Governance
2.1 - Plan Governance, Risk, and Compliance (GRC)
- Purpose
- Importance
- Frameworks and tools
2.2 - Understand redundancy
- Business Continuity (BC)
- Disaster Recovery (DR)
2.3 - Understand security awareness
- Organizational culture (e.g., importance of security, security leadership)
- Concepts (e.g., social engineering, password protection, phishing)
2.4 - Measure cybersecurity effectiveness
- Key metrics, Key Risk Indicators (KRI)
- Dashboards, score cards, reports
Domain 3: Identity And Access Management (IAM) Concepts
3.1 - Understand identity life cycle management
- Roles definition
- Provision
- Review
- Deprovision
- Frameworks and tools
3.2 - Understand logical access controls
- Principle of Least Privilege (PoLP)
- Separation of Duties (SoD)
- Access control models
- CC Certification Exam Outline
Domain 4: Networking and Cloud Security Concepts
4.1 - Understand network security
- Concepts (e.g., Open Systems Interconnection (OSI) model, Transmission Control Protocol/Internet Protocol (TCP/IP) model, Internet Protocol version 4 (IPv4), Internet Protocol version 6 (IPv6), Virtual Private Network (VPN))
- Firewalls (e.g., ports, applications)
- Wireless (e.g., Wi-Fi, Bluetooth)
- Embedded systems (e.g., Industrial Control System (ICS)), Internet Of Things (IoT)
4.2 - Understand network security architecture
- Comprehending network segmentation (e.g., Firewall zones, Virtual Local Area Network (VLAN), micro-segmentation)
- Defense in Depth
- Zero Trust (ZT)
4.3 - Understand cloud security
- Characteristics (e.g., Broad network access, rapid elasticity, measured service, on-demand self-service, resource pooling)
- Service models
- Deployment models
- Shared security model (e.g., roles and responsibilities)
Domain 5: Security Operations and Incident Response
5.1 - Understand data security
- Data handling (e.g., classification, labeling, masking, and sanitization)
- Encryption (e.g., symmetric, asymmetric, hashing, quantum resistant cryptography)
5.2 - Understand security operations
- Logging and monitoring security events
- Security event triage (e.g., incident use cases, prioritization, correlation)
- Threat actors (e.g., types, motivations)
- Cyber threat intelligence
- Threat frameworks
5.3 - Understand Incident Response (IR)
- Data handling policy implementing Incident Response Plan (IRP)
- Incident Response (IR) exercises (e.g., testing, tabletop)
5.4 - Understand asset protection
- Asset lifecycle management (e.g., End Of Life (EOL) software and devices)
- Configuration and change management
5.5 - Understand security testing
- Security readiness testing (e.g., blue teaming, purple teaming, red teaming)
- Application testing (e.g., vulnerability scanning, static analysis, dynamic analysis, threat modeling)
- Physical penetration testing (e.g., phishing, tailgating, impersonation)
What do we offer?
- Full-Length Mock Test with unique questions in each test set
- Practice objective questions with section-wise scores
- In-depth and exhaustive explanation for every question
- Reliable exam reports evaluating strengths and weaknesses
- Latest Questions with an updated version
- Tips & Tricks to crack the test
- Unlimited access
What are our Practice Exams?
- Practice exams have been designed by professionals and domain experts that simulate real-time exam scenario.
- Practice exam questions have been created on the basis of content outlined in the official documentation.
- Each set in the practice exam contains unique questions built with the intent to provide real-time experience to the candidates as well as gain more confidence during exam preparation.
- Practice exams help to self-evaluate against the exam content and work towards building strength to clear the exam.
- You can also create your own practice exam based on your choice and preference
