Pass the ISC certification CC Questions and answers with Dumpstech

The final phase in the data security lifecycle isdestruction. After data is no longer required for business, legal, or regulatory purposes, it must be securely destroyed to prevent unauthorized recovery or misuse.

Encryption, backup, and archival are all earlier phases focused on protecting data during use, storage, and retention. Destruction ensures data is permanently removed through secure wiping, degaussing, or physical destruction of media.

Improper data disposal can lead to data breaches through remanence. NIST SP 800-88 provides detailed guidance on secure media sanitization and destruction methods. Secure destruction is especially critical for sensitive and regulated data such as PII, PHI, and financial records.

SSH uses TCP port 22 by default and provides encrypted remote administration. Telnet (23) and FTP (21) are insecure alternatives.

An Incident Response Plan (IRP) outlines roles, responsibilities, and procedures for handling security incidents and minimizing damage.

Digital signatures provideauthentication,integrity, andnon-repudiation, but they donot provide confidentiality. A digital signature verifies who sent the message and ensures it was not altered, but the content remains readable unless encryption is also applied.

Confidentiality requires encryption, typically using symmetric or asymmetric cryptography. Digital signatures are often combined with encryption (such as in TLS or secure email), but by themselves they do not hide message contents.

At Layer 3 (Network Layer), data is encapsulated intopacketsfor routing across networks.

Integrity applies broadly—to data, systems, processes, and organizational operations—ensuring accuracy, completeness, and trustworthiness.

Non-repudiation requires strong identity verification, message integrity, and tamper resistance, typically implemented using digital signatures and PKI.

White-box testing involves examining an application’s internal structure, including source code, logic paths, and configurations, to identify vulnerabilities and security weaknesses. Testers have full knowledge of the system and can analyze how data flows and how controls are implemented.

This testing approach is effective for identifying issues such as insecure coding practices, logic flaws, and hard-coded credentials. Black-box testing does not involve source code access, functional testing validates behavior, and user acceptance testing focuses on business requirements.

White-box testing is commonly used in secure code reviews, static application security testing (SAST), and DevSecOps pipelines. Security standards strongly recommend white-box techniques for early vulnerability detection.

ICMP is used for network diagnostics, including ping operations that test host availability. RFC 792 defines ICMP behavior.

Symmetric encryption uses a single shared key for both encryption and decryption. This means that both the sender and receiver must securely possess the same key.

Symmetric algorithms are fast and efficient, making them ideal for encrypting large amounts of data. Common examples include AES and ChaCha20.

Asymmetric (public key) encryption uses two keys—public and private—and is slower. “TCB key” is not a recognized encryption type.

Because of key distribution challenges, symmetric encryption is often combined with asymmetric encryption for secure key exchange. This hybrid approach is used in protocols like TLS and is recommended by modern cryptographic standards.