Free IC Practice Questions

Question 1

An accounts-payable clerk receives new bank details from a supplier in an existing email conversation. The sender address and purchase-order number match previous invoices. Before changing the payment record, which check provides independent confirmation?

Accepted Answer

Call the supplier on the previously verified number in its account record.

Answer

Reply in the existing conversation and ask the supplier to confirm the new details.

Answer

Check that the attached invoice opens normally and passes the organization's malware scan.

Answer

Have a colleague compare the request with earlier supplier emails.

Question 2

Nadia replaces a supplier portal's saved password in her password manager with a newly generated value. At the verified portal, the new value is rejected, but the old one still works. What is needed to complete the change?

Accepted Answer

Change the password at the portal and confirm that the saved vault entry matches.

Answer

Wait for the password manager to synchronize its updated entry.

Answer

Ask security to disable the account until the two systems hold matching credentials.

Answer

Type the generated password manually instead of using autofill.

Question 3

Three previously bookmarked websites show 'certificate not yet valid' on a laptop brought out of storage. A second managed laptop opens all three normally on the same Wi-Fi. Which local check best fits this pattern?

Accepted Answer

Check whether the laptop's system date and time match the actual date and time.

Answer

Check whether the same sites can be reached through an approved mobile hotspot.

Answer

Check whether IT needs to install additional trusted certificate authorities.

Answer

Check whether clearing stored cookies restores the affected sign-in sessions.

Question 4

Files on a shared project drive are rapidly being renamed, and a ransom message appears on Omar's laptop. Both its Ethernet and Wi-Fi connections are active and can be disconnected immediately. A colleague is already notifying the incident team. To contain the suspected spread while preserving evidence, Omar should:

Accepted Answer

Disconnect Ethernet and Wi-Fi and keep the laptop powered on for responders.

Answer

Shut down the laptop and wait for the incident team.

Answer

Disconnect Ethernet and lock the session, leaving Wi-Fi available for remote support.

Answer

Keep both connections active so responders can observe the changes before containing them.

Question 5

The publisher of a document viewer reports that release 6.4, builds 120-146, contains a security flaw; build 147 and later correct it. All four records below concern release 6.4. Which record verifies that the fix is installed?

Accepted Answer

The running application's About screen reports that build 153 is installed.

Answer

The Professional edition is configured to check for updates automatically.

Answer

The approved software catalog's build 153 installer has finished downloading.

Answer

Build 138 is installed, and the latest malware scan reports no threats.

Question 6

For a confidential pricing file, the access panel lists an active 'Anyone with the link' URL and separate, sign-in-required permissions for three named reviewers. The URL has been forwarded outside the team, and the exposure has been reported. The reviewers still need the file. Which access change closes the exposed route?

Accepted Answer

Revoke the 'Anyone with the link' URL and preserve the reviewers' named permissions.

Answer

Create a new named-recipient link while leaving both existing access routes active.

Answer

Remove editing permission but keep the public URL active for anyone who has it.

Answer

Require MFA for the named reviewers while keeping both existing access routes active.

Question 7

An employee unlocks an approved encrypted USB drive on a laptop later found to be compromised. Investigators establish that malware read files from the drive during that session. Which change addresses the route by which the data became exposed?

Accepted Answer

Have the laptop remediated before using it to open sensitive files again.

Answer

Increase the strength of the password used to unlock the portable drive.

Answer

Keep the recovery key in a separate, access-controlled storage location.

Answer

Keep fewer confidential documents on the removable drive during each session.

Question 8

A managed work phone is stolen during a business trip. An administrator restricts the owner's account and sends a remote-wipe command. The phone is offline, and the console still shows 'Pending.' Which statement about its stored files is justified?

Accepted Answer

Their erasure remains unconfirmed; requesting a wipe does not prove execution.

Answer

They were erased when the management service accepted the administrator's request.

Answer

They became unreadable when the owner's online account access was restricted.

Answer

They cannot be accessed while the phone is disconnected from the internet.

Question 9

During supplier review, an ISO/IEC 27001:2022 certificate is offered as assurance for a customer-hosting service. Its scope covers only the supplier's internal HR and finance operations. The purchasing team should:

Accepted Answer

Request evidence covering the hosting service's security controls and certification scope.

Answer

Treat the excluded hosting service as evidence that the supplier's security controls failed.

Answer

Reject the supplier until every service it offers is included in one certificate.

Answer

Accept the certificate for hosting because the same legal company operates both services.

Question 10

At 14:00, a design studio tests its only two available backups, containing data as of 08:00 and 12:00. The 12:00 job is marked 'Completed,' but its restored files cannot be opened. The 08:00 copy restores correctly. The studio allows no more than two hours of work to be lost, and its live files remain intact. What does the test show about recovery readiness?

Accepted Answer

The six-hour recovery gap exceeds the limit; repair and retest the backups.

Answer

The two-hour limit is met because the latest backup job completed.

Answer

The four-hour interval between the backups is the maximum amount of work at risk.

Answer

Recovery is adequate because a complete set of project files was restored successfully.

Free IC Practice Questions

Domain 1: Understanding the Cybersecurity Ecosystem

Question 1

Question 2

Question 3

Domain 2: Securing Data, Accounts, and Digital Devices

Question 4

Question 5

Domain 3: Adopting Secure Digital Practices

Question 6

Question 7

Domain 4: Protecting Against Cyber Threats and Digital Risks

Question 8

Question 9

Question 10

That's 10 of 1,030