ISC CC - CC - Certified in Cybersecurity

OAuth uses tokens to grant limited access without exposing credentials, making it a widely used token-based authentication method.

Load balancing distributes incoming traffic across multiple servers or resources to improve performance, scalability, and availability. It prevents overload of a single system and supports high availability architectures.

Immediate response checklists ensure rapid communication and awareness when a BCP is enacted.

A Red Book is ahard-copy version of critical business continuity and emergency procedures. It is essential when disasters such as hurricanes, earthquakes, or cyberattacks disable power, networks, or electronic backups. In such scenarios, electronic access may be impossible, making physical documentation vital.

The final phase in the data security lifecycle isdestruction. After data is no longer required for business, legal, or regulatory purposes, it must be securely destroyed to prevent unauthorized recovery or misuse.

Encryption, backup, and archival are all earlier phases focused on protecting data during use, storage, and retention. Destruction ensures data is permanently removed through secure wiping, degaussing, or physical destruction of media.

Improper data disposal can lead to data breaches through remanence. NIST SP 800-88 provides detailed guidance on secure media sanitization and destruction methods. Secure destruction is especially critical for sensitive and regulated data such as PII, PHI, and financial records.

Intercepting traffic to capture credentials is commonly achieved throughpacket sniffing, which targets theData Link layer (Layer 2). Techniques such as ARP poisoning operate at this layer to redirect traffic to the attacker.

While credentials belong to applications, the interception itself occurs at Layer 2.

Governancedefines oversight, accountability, and decision-making structures within an organization.

HTTPS uses both asymmetric and symmetric encryption. Asymmetric encryption is used during the TLS handshake to securely exchange keys and authenticate the server. Once the secure session is established, symmetric encryption is used for data transmission because it is faster and more efficient.

This hybrid approach combines the strengths of both encryption types and is fundamental to secure web communication.

Mandatory Access Control (MAC) enforces centrally managed security labels and clearances, making it suitable for classified and government systems.

Double dealing is not a recognized social engineering technique. The others involve manipulating individuals to disclose information or perform actions.