PracticeVideosBlogFlashcards
All Practice Exams

Free Practice Questions for CIISec Information and Cyber Security Foundation ICSF

Exam-style questions and explanations by OpenExamPrep.

✓ No registration✓ No credit card
100+ Questions
100% Free

Loading practice questions...

Exam Review

Key Facts: CIISec Information and Cyber Security Foundation ICSF Exam

50 Qs

Exam Questions

50% (25/50 marks)

Passing Score

£150.00

Exam Fee

Prepare for the 50-question CIISec ICSF exam with 100 free practice questions covering cyber threat landscape, cryptography, network security, and incident response.

Sample CIISec Information and Cyber Security Foundation ICSF Practice Questions

Try these sample questions to review concepts for the CIISec Information and Cyber Security Foundation ICSF exam. Each question includes a detailed explanation. Start the interactive quiz above for the full 100+ question experience with AI tutoring.

1Which foundational security concept ensures that information and systems are accessible to authorised users whenever required?
A.Availability
B.Confidentiality
C.Integrity
D.Non-repudiation
Explanation: Availability guarantees that system resources, networks, and data are operational and accessible to authorized entities when needed. It is one of the three core pillars of the CIA triad alongside confidentiality and integrity. Countermeasures such as redundancy, failover mechanisms, and DDoS mitigation protect availability.
2What type of social engineering attack specifically targets high-ranking executives using highly tailored and convincing communication?
A.Smishing
B.Vishing
C.Whaling
D.Baiting
Explanation: Whaling is a specialized spear-phishing attack directed specifically at C-suite executives, senior management, or high-profile individuals. Attackers craft highly persuasive communications to trick executives into releasing sensitive corporate data or authorizing large wire transfers. Because victims hold elevated privileges, whaling poses severe operational and financial risks.
3Which malware class encrypts victim files or systems and demands payment in exchange for a decryption key?
A.Ransomware
B.Spyware
C.Adware
D.Rootkit
Explanation: Ransomware is malicious software designed to lock or encrypt files, systems, or storage drives until a ransom is paid to the attacker. Modern variants often employ double extortion by exfiltrating data prior to encryption and threatening public release. Regular offline backups and strict access controls are primary defenses.
4Multi-Factor Authentication (MFA) requires a user to provide authentication factors from different categories. Which combination represents true MFA?
A.A password and a PIN
B.A password and a push notification on a registered smartphone
C.A thumbprint scan and a facial recognition scan
D.A security question response and a user password
Explanation: True Multi-Factor Authentication requires factors from distinct categories: something you know (password), something you have (registered smartphone receiving push notifications or TOTP), or something you are (biometrics). Combining a password (something you know) with a smartphone push notification (something you have) satisfies MFA. Using two items from the same category (e.g., password and PIN) constitutes multi-step, not multi-factor, authentication.
5What fundamental access control rule dictates that individuals should only be granted the minimum permissions necessary to complete their job duties?
A.Principle of Least Privilege
B.Separation of Duties
C.Implicit Deny
D.Need-to-Know
Explanation: The Principle of Least Privilege (PoLP) states that security subjects (users, services, or processes) should receive only the essential rights and authorizations needed to perform their specified tasks. Enforcing least privilege limits the blast radius of compromised credentials and restricts lateral movement during security incidents.
6Which characteristic distinguishes symmetric encryption from asymmetric encryption?
A.Symmetric encryption uses different keys for encryption and decryption.
B.Symmetric encryption relies on a single shared key for both encryption and decryption.
C.Symmetric encryption is only used for digital signatures, never bulk data encryption.
D.Symmetric encryption is computationally slower than asymmetric encryption.
Explanation: Symmetric encryption utilizes one secret key shared between parties to perform both encryption and decryption (e.g., AES, ChaCha20). Because symmetric algorithms require low computational overhead, they are ideal for encrypting large volumes of data at rest or in transit.
7What is the primary function of a network firewall?
A.To inspect incoming emails for malicious attachments
B.To monitor network traffic and enforce access security rules between trusted and untrusted networks
C.To back up server databases automatically every night
D.To encrypt hard drive volumes on local workstations
Explanation: A network firewall acts as a boundary defense mechanism, inspecting network packets and enforcing defined access rules (allow or deny) between security zones (e.g., an internal corporate LAN and the untrusted internet). Firewalls filter traffic based on IP addresses, ports, protocols, or application behavior.
8Which statement accurately describes the main objective of endpoint antivirus software?
A.To establish encrypted tunnels for remote network connections
B.To detect, quarantine, and eliminate malicious software on individual computing devices
C.To assign internal IP addresses dynamically using DHCP
D.To host corporate domain name service records
Explanation: Antivirus and antimalware software running on endpoint devices scans files, memory, and running processes to identify, block, isolate (quarantine), and remove malicious software. Modern endpoint security solutions combine signature detection with behavioral monitoring and heuristics.
9What makes HTTPS significantly more secure than standard HTTP for web communications?
A.HTTPS compresses web traffic to prevent server overload
B.HTTPS encrypts web traffic using TLS/SSL to protect confidentiality and integrity
C.HTTPS automatically disables all JavaScript execution on web pages
D.HTTPS eliminates the need for user passwords on websites
Explanation: HTTPS (Hypertext Transfer Protocol Secure) incorporates Transport Layer Security (TLS) or SSL to encrypt communications between a web browser and a server. Encrypting the connection protects sensitive data (such as login credentials and financial transactions) against eavesdropping, interception, and tampering in transit.
10In standard Incident Response frameworks (such as NIST or ISO/IEC 27035), what is the first phase of the incident response lifecycle?
A.Containment
B.Preparation
C.Eradication
D.Lessons Learned
Explanation: Preparation is the foundation of the incident response lifecycle. During preparation, organizations establish IR policies, assemble incident response teams, configure monitoring tools, define communication protocols, and conduct regular training exercises prior to an actual security incident.

About the CIISec Information and Cyber Security Foundation ICSF Exam

The CIISec Information and Cyber Security Foundation (ICSF) exam validates entry-level knowledge across the 45 skill areas of the CIISec Knowledge Framework.

Exam sponsor: Chartered Institute of Information Security (CIISec). The requirements and fees below concern the certification or admission exam, separate from our free practice resources.

Questions

50 questions

Time Limit

50 minutes

Passing Score

50% (25/50 marks)

Exam / Certification Fees

£150.00

Exam sponsor website

Fees, eligibility, and exam policies can change. Confirm them with the exam sponsor before applying or paying.

Our practice resources: topics covered

We aim to reflect publicly available exam outlines and topic information in our study resources. Coverage, format, and difficulty may differ from the actual exam, and we cannot guarantee that every detail is accurate or current. Confirm exam requirements, fees, and policies with the official exam sponsor.

25%

Cyber Security Fundamentals & Threats

CIA triad, threat actors, malware, phishing, and social engineering.

25%

Access Control & Cryptography

IAM, RBAC, symmetric/asymmetric encryption, PKI, and hashing.

25%

Network & Endpoint Security

Firewalls, IDS/IPS, VPNs, TLS, endpoint protection, and cloud security.

25%

Governance, Risk & Incident Response

ISO 27001, risk management, incident response lifecycle, and compliance.

Preparing for the CIISec Information and Cyber Security Foundation ICSF Exam

What You Need to Know

  • Passing score: 50% (25/50 marks)
  • Exam length: 50 questions
  • Time limit: 50 minutes
  • Exam / certification fees: £150.00 Official sources

Using Our Practice Resources

  • Work through all 100 available questions
  • Review every answer and explanation
  • Track weak areas and revisit them
  • Use our AI tutor for tough concepts

CIISec Information and Cyber Security Foundation ICSF: Suggested Study Strategy

1Review all official Chartered Institute of Information Security (CIISec) syllabus domain weightings and key terms before testing.
2Practice timed mock questions to build pace for the 50 minutes exam limit.
3Study answer explanations carefully to understand why incorrect distractors are wrong.

Frequently Asked Questions

How many questions are on the official CIISec ICSF exam?

The official CIISec ICSF exam consists of 50 questions to be completed within 50 minutes.

What is the passing score for the CIISec ICSF exam?

The passing score for the CIISec ICSF exam is 50% (25/50 marks).

How much does the CIISec ICSF exam cost?

The official exam fee for the CIISec ICSF is £150.00.