ISC Updated CC Exam Questions and Answers by forest

In e-commerce,non-repudiationensures accountability by preventing buyers or sellers from denying transactions they actually performed. This is essential for trust, legal enforcement, and dispute resolution in digital commerce.

By using digital signatures, certificates, and secure transaction logs, organizations can prove that a specific user authorized a transaction. This protects merchants from fraudulent chargebacks and customers from transaction tampering.

Without non-repudiation, online commerce would lack trust and legal enforceability, undermining digital economies.

Data remanence refers to the residual representation of data that remains on storage media even after attempts have been made to delete or erase it. When files are deleted, the operating system typically removes references to the data rather than overwriting the actual bits on the disk. As a result, the data may still be recoverable using forensic tools.

Remanence is especially relevant for magnetic storage, solid-state drives, and backup media. Because of this risk, security standards recommend proper media sanitization techniques such as overwriting, degaussing, or physical destruction. NIST SP 800-88 specifically addresses media sanitization methods to mitigate remanence risks.

This concept is critical when disposing of or repurposing storage devices, particularly those that previously contained sensitive or regulated data.

Network segmentation isolates systems and resources into separate security zones to limit lateral movement by attackers. By segmenting networks, organizations protect critical assets and reduce the impact of breaches.

If one segment is compromised, segmentation prevents attackers from easily accessing other systems. This approach supports defense-in-depth and zero trust architectures.

Network segmentation is implemented using VLANs, firewalls, and access controls and is a foundational security practice recommended by NIST and CIS.

A Security Operations Center (SOC) continuously monitors security events, analyzes threats, and coordinates incident response. SOCs integrate people, processes, and technology such as SIEM, SOAR, and threat intelligence platforms.