Search...

CC Study Guide

Domain-by-domain study guide for ISC² Certified in Cybersecurity (CC). Covers all 5 exam objectives with topic checklists, quick notes, and practice links.

Download PDF Notes

Exam Overview

Key facts before you start studying

Duration

120 min

Questions

100

Exam Code

Domains

About this exam

Citation-ready facts for CC (CC)

CC (CC) is a ISC2 certification exam with about 100 questions over 120 minutes, typically requiring a scaled score of 700 to pass. Official domain weights on CertStud: Security Principles (26%); Incident Response, Business Continuity and Disaster Recovery Concepts (10%); Access Controls Concepts (22%); Network Security (24%); Security Operations (18%).

Use this study guide with free practice questions, the week-by-week study plan, and detailed notes. Confirm current objectives and scoring on the official ISC2 exam page before booking.

Quick Navigation

Jump to a specific exam domain

1. Security Principles (26%)
2. Incident Response, Business Continuity and Disaster Recovery Concepts (10%)
3. Access Controls Concepts (22%)
4. Network Security (24%)
5. Security Operations (18%)

Domain 1

26%

Security Principles

Understand fundamental security concepts including CIA Triad, risk management, and security controls

Topics to Master

Confidentiality, Integrity, Availability (CIA Triad)
Risk management concepts
Security controls (physical, technical, administrative)
Governance and compliance
Security policies and procedures
Ethics and professional responsibility

Domain 2

10%

Incident Response, Business Continuity and Disaster Recovery Concepts

Understand incident response phases and business continuity/disaster recovery planning

Topics to Master

Incident response phases (preparation, detection, containment, eradication, recovery)
Business continuity planning (BCP)
Disaster recovery planning (DRP)
Recovery time objectives (RTO) and recovery point objectives (RPO)
Backup strategies and testing

Domain 3

22%

Access Controls Concepts

Understand authentication, authorization, and access control models

Topics to Master

Authentication methods (passwords, MFA, biometrics)
Authorization and access control models (DAC, MAC, RBAC)
Identity management
Least privilege and separation of duties
Account management and provisioning

Domain 4

24%

Network Security

Understand network fundamentals, protocols, and security controls

Topics to Master

OSI model and TCP/IP
Network protocols (HTTP, HTTPS, FTP, DNS, DHCP)
Firewalls and network segmentation
VPNs and remote access security
Wireless security (WPA, WPA2, WPA3)
Network monitoring and intrusion detection

Domain 5

18%

Security Operations

Understand security operations including data security, physical security, and monitoring

Topics to Master

Data security and encryption
Data classification and handling
Physical security controls
Security awareness and training
Logging and monitoring (SIEM)
Change management and configuration management

Continue Your Prep

Free CertStud resources for CC

Study Notes Exam Study Plan Start Practice Test

Back to CC

CC Study Guide

Domain-by-domain study guide for ISC² Certified in Cybersecurity (CC). Covers all 5 exam objectives with topic checklists, quick notes, and practice links.

Download PDF Notes

Exam Overview

Key facts before you start studying

Duration

120 min

Questions

100

Exam Code

Domains

About this exam

Citation-ready facts for CC (CC)

Use this study guide with free practice questions, the week-by-week study plan, and detailed notes. Confirm current objectives and scoring on the official ISC2 exam page before booking.

Quick Navigation

Jump to a specific exam domain

1. Security Principles (26%)
2. Incident Response, Business Continuity and Disaster Recovery Concepts (10%)
3. Access Controls Concepts (22%)
4. Network Security (24%)
5. Security Operations (18%)

Domain 1

26%

Security Principles

Understand fundamental security concepts including CIA Triad, risk management, and security controls

Topics to Master

Confidentiality, Integrity, Availability (CIA Triad)
Risk management concepts
Security controls (physical, technical, administrative)
Governance and compliance
Security policies and procedures
Ethics and professional responsibility

Domain 2

10%

Incident Response, Business Continuity and Disaster Recovery Concepts

Understand incident response phases and business continuity/disaster recovery planning

Topics to Master

Incident response phases (preparation, detection, containment, eradication, recovery)
Business continuity planning (BCP)
Disaster recovery planning (DRP)
Recovery time objectives (RTO) and recovery point objectives (RPO)
Backup strategies and testing

Domain 3

22%

Access Controls Concepts

Understand authentication, authorization, and access control models

Topics to Master

Authentication methods (passwords, MFA, biometrics)
Authorization and access control models (DAC, MAC, RBAC)
Identity management
Least privilege and separation of duties
Account management and provisioning

Domain 4

24%

Network Security

Understand network fundamentals, protocols, and security controls

Topics to Master

OSI model and TCP/IP
Network protocols (HTTP, HTTPS, FTP, DNS, DHCP)
Firewalls and network segmentation
VPNs and remote access security
Wireless security (WPA, WPA2, WPA3)
Network monitoring and intrusion detection

Domain 5

18%

Security Operations

Understand security operations including data security, physical security, and monitoring

Topics to Master

Data security and encryption
Data classification and handling
Physical security controls
Security awareness and training
Logging and monitoring (SIEM)
Change management and configuration management

Continue Your Prep

Free CertStud resources for CC

Study Notes Exam Study Plan Start Practice Test