10 exam-style questions with answers and explanations, straight from our 1,030-question bank. Tap an answer to check yourself. When you're ready, take the scored version in the free practice test.
The Associate of ISC2 exam has 150 questions and runs 3 hours.
These 10 free Associate of ISC2 questions are organized by exam domain, so you can see how each part of the Associate of ISC2 blueprint is tested. Reveal the answer and explanation under each question.
A security practitioner discovers that their employer is deliberately concealing a data breach that is actively exposing customers to identity theft. Senior leadership instructs the practitioner to say nothing. Under the ISC2 Code of Ethics, how should this conflict be resolved?
Correct answer: B - The public interest takes precedence, because the canons are applied in the order listed
A three-person accounts payable team is too small to separate the duties of creating a vendor record and approving payment to that vendor. Instead, the department director personally reviews and signs off on every new vendor payment. This review is BEST classified as which type of control?
Correct answer: D - Compensating
To log in, users must enter a password, then answer a personal security question, then enter a numeric PIN. How is this authentication scheme BEST described?
Correct answer: C - Single-factor authentication
A server is valued at $600,000. A flood would destroy 30 percent of its value, and historical data indicates that such a flood occurs once every four years. What is the annualized loss expectancy (ALE)?
Correct answer: A - $45,000
A workstation is actively communicating with an external command-and-control server. The incident response plan requires that forensic evidence be preserved for possible prosecution. What should the responder do FIRST?
Correct answer: B - Disconnect the workstation from the network and leave it powered on
An organization performs a full backup every Sunday night and a differential backup every other night of the week. The primary file server fails on Thursday morning. Which backup sets are required to restore it completely?
Correct answer: A - Sunday's full backup and Wednesday night's differential backup
Alice wants to send Bob a message that only Bob is able to read. Which key should Alice use to encrypt it?
Correct answer: D - Bob's public key
An attacker floods a switch with frames containing thousands of random source MAC addresses. The switch's address table fills, and it begins forwarding traffic out of every port. Which control BEST prevents this attack?
Correct answer: A - Port security with a per-port MAC address limit
An organization subscribes to a SaaS customer relationship management platform. Under the cloud shared responsibility model, which of the following remains the responsibility of the customer?
Correct answer: B - Configuring user access permissions and classifying the data in the platform
Which characteristic BEST distinguishes a worm from a virus?
Correct answer: A - A worm spreads across systems without requiring a host file or user action
The Associate of ISC2 exam also covers these domains. Drill them in the full free practice test:
The full bank has 1,020 more Associate of ISC2 questions with explanations.
Continue in the free practice test →
View plans