(ISC)2 Certified in Cybersecurity (CC) Exam Guide: Master core security concepts and pass the ISC2 Certified in Cybersecurity (CC) exam

Pass the ISC2 CC Certified in Cybersecurity exam with clear lessons, domain-focused practice, and full mock tests aligned to the official exam outline.

Key Features

• Study each CC objective with beginner-first explanations
• Check your understanding of key concepts with topic quizzes that include scenario-based MCQs
• Prepare for the CC exam with 2 mock exams of 125 questions each, flashcards, and exam tips
• Use blueprint mapping, topic-wise MCQs, and rapid checklists for revision

Book Description

Prepare for the ISC2 Certified in Cybersecurity (CC) exam without getting buried in jargon. Written by Hemang Doshi (CA, CISA, CC), an IT auditor and ISO 27001 lead auditor, this guide explains each objective in plain language.

You’ll cover disaster recovery and incident response; access controls; network security; and security operations, sequenced to build confidence and reinforced with frequent checks for understanding. The book coverage reflects the 2025 exam, including the 2-hour, 100–125 item CAT format.

To help you practice the way the exam asks questions, you get topic-wise review MCQs, 50–100 flashcards, 25 focused exam tips, and two full 125-question mock exams with explanations. By the end of the course, you will be able to evaluate basic cybersecurity risks, select appropriate controls, and explain key cybersecurity concepts.

What you will learn

• How to apply the CIA triad, authentication, and privacy concepts
• Basic risk assessment and choosing suitable cybersecurity methods
• How to classify administrative, technical, and physical controls
• Business continuity, disaster recovery, and incident response
• The implementation of least privilege, RBAC, and the segregation of duties
• How to recognize common network attacks and apply core safeguards
• Encryption, data handling, and logging to support operations

Who this book is for

Students and early-career IT professionals who want a structured, beginner-friendly route to the ISC2 CC exam and entry-level cybersecurity roles. Basic computer literacy helps, but no prior security experience is required.

Table of Contents

1. Security Principles
2. Business Continuity, Disaster Recovery and Incident Response
3. Access Control Concepts
4. Network Security
5. Security Operations

Hemang Doshi has more than 15 years of experience in the field of system audit, IT risk and compliance, internal audit, risk management, information security audit, third-party risk management, and operational risk management. He has authored several books for certification such as CISA, CRISC, CISM, DISA, CEH and enterprise risk management. His books and lectures are sold in more than 175 countries and more than 35 languages. Gratitude To my mother, Jyoti Doshi, and to the memory of my father, Hasmukh Doshi, for their sacrifices and for exemplifying the power of determination. To my wife, Namrata Doshi, for being my loving partner throughout our life journey together, and to my kids Jia and Neev for allowing me to write this book. To my sister, Pooja Shah, my brother-in-law, Hiren Shah, and my nephew, Phenil Shah, for their love, support, and inspiration. To my in-laws, Chandrakant Shah, Bharti Shah, and Ravish Shah, for their love and motivation. To my mentor and guide, Dipak Mazumder, for showing me how talent and creativity evolve.