ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 121:

  What does the term "Two-factor authentication" refer to in Cybersecurity?

  A. Using two different antivirus programs
  B. Verifying identity with two independent factors
  C. Accessing two different networks simultaneously
  D. Changing passwords every two weeks
  B. Verifying identity with two independent factors

• Question 122:

  What is the term used to denote the inherent set of privileges assigned to a user upon the creation of a new account?

  A. Aggregation
  B. Transitivity
  C. Baseline
  D. Entitlement
  C. Baseline

• Question 123:

  What is the difference between business continuity planning and disaster recovery planning?

  A. Business continuity planning is abount restoring IT and communincations back to full operations after a dustruption, while disaster recovery planning is about maintaining criticla business functions
  B. Disaster recovery planning is about restoring IT and communications back to full operations after a disruption, while business continuity planning is about maintaining critical business functions
  C. Business continuity planning and disaster recovery planning are the same thisg
  D. Business continuity planning is about maintainig criticla business funtions before disasteroccurs
  B. Disaster recovery planning is about restoring IT and communications back to full operations after a disruption, while business continuity planning is about maintaining critical business functions

• Question 124:

  Which of these tool is commonly used to crack passwords

  A. Bup Suite
  B. Nslookup
  C. Wireshark
  D. John the ripper
  D. John the ripper

• Question 125:

  What is sensitivity in the context of confidentiality

  A. The harm caused to externl stakeholders if information is disclosed or modified
  B. The ability of information to be accessed only by authorized individuals
  C. The need for protection assigned to information by its owner
  D. The Health status of the individuals
  C. The need for protection assigned to information by its owner

• Question 126:

  After an Earthquake disrupting business operations, which documents contains the reactive procedures required to return business to normal operations

  A. The Business Impact Analysis
  B. The Business Continuity Plan
  C. The Disaster Recovery plan
  D. The Business Impact Plan
  C. The Disaster Recovery plan

• Question 127:

  Exhibit.

  

  How many keys would be required to support 50 users in an asymmetric cryptography system?

  A. 100
  B. 200
  C. 50
  D. 1225
  A. 100

• Question 128:

  Which of the following best describes a zero-day vulnerability?

  A. A vulnerability that has been identified and patched by software vendors
  B. A vulnerability that has not yet been discovered or publicly disclosed.
  C. A vulnerability that can only be exploited by experienced hackers.
  D. A vulnerability that affects only legacy systems.
  B. A vulnerability that has not yet been discovered or publicly disclosed.

• Question 129:

  The mitigation of violations of security policies and recommended practices

  A. DR
  B. IR
  C. Threat hunting
  D. Incident response
  D. Incident response

• Question 130:

  Which component of the incident response plan involves identifying critical data and systems?

  A. Detection and Analysis
  B. Preparation
  C. Cantainment
  D. Eradication
  B. Preparation