ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 161:

  Exhibit.

  

  information security is not built on which of the following?

  A. Confidentiality
  B. Availability
  C. Accessibility
  D. Integrity
  C. Accessibility

• Question 162:

  Difference between Sniffing and Snooping

  A. Sniffing is the process of intercepting and collecting network traffic as it passes over a digital network. Spoofing is the act of disguising a communication from an unknown source as being trustworthy.
  B. Snooping is the process of intercepting and collecting network traffic as it passes over a digital network. Sniffing is the act of disguising a communication from an unknown source as being trustworthy.
  C. Both are same
  D. Sniffing is not thread and snoofing is a thread
  A. Sniffing is the process of intercepting and collecting network traffic as it passes over a digital network. Spoofing is the act of disguising a communication from an unknown source as being trustworthy.

• Question 163:

  When the ISC2 Mail server sends mail to other mail servers it becomes --?

  A. SMTP Server
  B. SMTP Peer
  C. SMTP Master
  D. SMTP Client
  D. SMTP Client

• Question 164:

  Why is an asset inventory much important?

  A. It tells you what to encrypt
  B. The law requires it
  C. It contains a price list
  D. You can't protect what you don't know you have
  D. You can't protect what you don't know you have

• Question 165:

  Duke would like to restrict users from accessing a list of prohibited websites while connected to his network. Which one of the following controls would BEST achieve his objective?

  A. URL Filter
  B. IP Address Block
  C. DLP Solution
  D. IPS Solution
  A. URL Filter

• Question 166:

  Port scanning attack target which OSI layer

  A. Layer 4
  B. Layer 3
  C. Layer 5
  D. Layer 6
  A. Layer 4

• Question 167:

  Who should participate in creating a BCP

  A. Only members from the IT department
  B. Only members from the management team
  C. Members from across the organization
  D. Only members from the finanace department
  C. Members from across the organization

• Question 168:

  A company data center has been breached by hackers and all its systems have been taken down what is the main objective of the DRP in such a scenario?

  A. To relocate the data center to another location
  B. To ensure the physical safety of employees in the data center
  C. To investigate and prosecute the hackers responsible of the attack
  D. To restore the IT systems to their last known state
  D. To restore the IT systems to their last known state

• Question 169:

  What is the main purpose of using multi-factor authentication (MFA) in a security system?

  A. To prevent data breaches
  B. To protect against malware
  C. To ensure data integrity
  D. To add an extra layer of security to user authentication
  D. To add an extra layer of security to user authentication

• Question 170:

  A common network device used to filter traffic?

  A. Server
  B. Endpoint
  C. Ethernet
  D. Firewa
  D. Firewa