ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 101:

  What is an incident in the context of cybersecurity

  A. Any observable occurrence in a network or system
  B. A deliberate security incident in which an intruder gains access to a system or system resource without authorization
  C. A particular attack that exploits system vulnerabilities
  D. An event that actually or potentially jeopardizes the confidentiality integrity or availability of an information system.
  D. An event that actually or potentially jeopardizes the confidentiality integrity or availability of an information system.

• Question 102:

  Which one of the following controls is not particularly effective against the insider threat?

  A. Least privilege
  B. Background checks
  C. Firewalls
  D. Separation of duties
  C. Firewalls

• Question 103:

  Which of the following protocols is a secure alternative to using telnet?

  A. SSH
  B. HTTPS
  C. SFTP
  D. LDAPS
  B. HTTPS

• Question 104:

  Your organization is concerned about network security and wants to prevent unauthorized access to its resources by implementing a security model where the network has not trusted space what type of security model is this

  A. Zero trust
  B. Trusted computing
  C. Trusted platform modelus
  D. Trusted execution environment
  A. Zero trust

• Question 105:

  Uses multiple types of access controls in literal or theoretical layers to help an organization avoid a monolithic security

  A. DMZ
  B. VLAN
  C. Defence in Depth
  D. VPN
  C. Defence in Depth

• Question 106:

  Walmart has large ecommerce presence in world. Which of these solutions would ensure the LOWEST possible latency for their customers using their services?

  A. CDN
  B. SaaS
  C. Load Balancing
  D. Decentralized Data Centers
  A. CDN

• Question 107:

  Also known as a virtual machine monitor or VMM, is software that creates and runs virtual machines (VMs)

  A. Hypervisor
  B. Simulation
  C. Emulation
  D. Cloud Controller
  A. Hypervisor

• Question 108:

  What is the main purpose of using digital signatures in communication security?

  A. To encrypt sensitive data during transmission
  B. To verify the identity of the sender and ensure the integrity of the message (Correct)
  C. To prevent unauthorized access to a network
  D. To compress data to reduce bandwidth usage
  B. To verify the identity of the sender and ensure the integrity of the message (Correct)

• Question 109:

  An external entity has tried to gain access to your organization's IT environment without proper authorization. This is an example of a(n)

  A. Exploit
  B. Intrusion
  C. Event
  D. Malware
  B. Intrusion

• Question 110:

  In information systems terms, the activities necessary to restore IT and communications services of an organization during and after an outage

  A. IR
  B. BC
  C. Risk Management
  D. DR
  D. DR