ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 131:

  If a device is found that is not compliant with the security baseline, what will be the security team action

  A. Report
  B. Evaluate
  C. Ignore
  D. Disabled or isolated into a quarantine area until it can be checked and updated.
  D. Disabled or isolated into a quarantine area until it can be checked and updated.

• Question 132:

  DevOps team has updated the application source code, Tom has discovered that many unauthorized changes have been made. What is the BEST control Tom can implement to prevent a recurrence of this problem?

  A. Backup
  B. File labels
  C. Security audit
  D. Hashing
  D. Hashing

• Question 133:

  Mark has purchased a MAC LAPTOP. He is scared of losing his screen and planning to buy an insurance policy. So, which risk management strategy is?

  A. Risk acceptance
  B. Risk deterrence
  C. Risk transference
  D. Risk mitigation
  C. Risk transference

• Question 134:

  What is the priority of incident response in the context of incident management

  A. Protect the organization mission and objectives
  B. Reduce the impact of the incident
  C. Protect life health and safety
  D. Resume interrupted operations as soon as possible
  C. Protect life health and safety

• Question 135:

  Exhibit.

  

  What is the purpose of a Security Information and Event Management (SIEM) system?

  A. Encrypting files
  B. Monitoring and analyzing security events
  C. Blocking malicious websites
  D. Managing user passwords
  B. Monitoring and analyzing security events

• Question 136:

  Which of these components is very likely to be instrumental to any disaster recovery (DR) effort?

  A. Routers
  B. Laptops
  C. Firewalls
  D. Backups
  D. Backups

• Question 137:

  Representation of data at Layer 3 of the Open Systems Interconnection (OSI) model.

  A. Segment
  B. Packet
  C. Frame
  D. None of the Above
  B. Packet

• Question 138:

  The testing or evaluation of security controls to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for an information system or organization.

  A. Security Assessment
  B. Risk Assessment
  C. DRP
  D. IRP
  A. Security Assessment

• Question 139:

  Which layer does VLAN hopping belong to?

  A. Layer 3
  B. Layer 4
  C. Layer 7
  D. Layer 2
  D. Layer 2

• Question 140:

  Timiting access to resources based on the sensitivity of the information that the resource contains and the authorization of the user to access information with that level of sensitivity.

  A. DAC
  B. MAC
  C. RuBAC
  D. RBAC
  B. MAC