Search...
Free CC study notes covering every exam domain — key concepts, mnemonics, and practice links.
Practice what you just read
10 free practice questions. No credit card.
Security Principles is the highest-weighted domain on the ISC² CC exam. Questions test whether you can apply foundational concepts — not just define them — in organizational scenarios involving policies, risk, and control selection.
| Control Type | Examples | Exam Focus |
|---|---|---|
| Administrative | Policies, training, background checks, separation of duties | Often the FIRST control to implement |
| Technical | Firewalls, encryption, MFA, IDS/IPS | Enforce what policies require |
| Physical | Locks, badges, CCTV, mantraps, environmental controls | Protect facilities and hardware |
Practice what you just read
10 free practice questions. No credit card.
Practice what you just read
10 free practice questions. No credit card.
Unlock Full Access
3 practice exams • 300+ questions
Download the free CC study notes PDF
Every domain in one printable file. No email address required.
Download the PDFCC is a ISC2 certification. These facts come from the current exam guide and are the numbers to plan around.
| Domain | Weight | What to focus on |
|---|---|---|
| Security Principles | 26% | Confidentiality, Integrity, Availability (CIA Triad), Risk management concepts, Security controls (physical, technical, administrative) |
| Network Security | 24% | OSI model and TCP/IP, Network protocols (HTTP, HTTPS, FTP, DNS, DHCP), Firewalls and network segmentation |
| Access Controls Concepts | 22% | Authentication methods (passwords, MFA, biometrics), Authorization and access control models (DAC, MAC, RBAC), Identity management |
| Security Operations | 18% | Data security and encryption, Data classification and handling, Physical security controls |
| Incident Response, Business Continuity and Disaster Recovery Concepts | 10% | Incident response phases (preparation, detection, containment, eradication, recovery), Business continuity planning (BCP), Disaster recovery planning (DRP) |
Yes. Every CC study note on this page is free to read, and the PDF download requires no email address. Practice questions start free as well.
They cover all 5 domains of the CC exam: Security Principles (26%), Network Security (24%), Access Controls Concepts (22%), Security Operations (18%), Incident Response, Business Continuity and Disaster Recovery Concepts (10%). Each section is weighted in the same proportion as the real exam, so nothing high-value is buried.
The CC exam has approximately 100 questions in 120 minutes, with a passing score of 700. Use the practice questions to confirm you are consistently above that line before booking the real exam.
Read a domain, then immediately answer practice questions on it — recall is what moves knowledge into long-term memory. Start with Security Principles, and finish with a mixed set so you practise switching between topics.
They cover the content, but reading alone is not enough. Answer practice questions for every domain and take a timed practice exam; the notes are most useful when you return to them after a wrong answer.