ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 171:

  What is the purpose of the post incident phase of incident response?

  A. To detect and analyze incidents
  B. To prepare for future incidents
  C. To document lessons learned and improve future incident response effectiveness
  D. To containment and eradicate incidents
  C. To document lessons learned and improve future incident response effectiveness

• Question 172:

  Which type of control is used to restore systems or processes to their normal state after an attack has occurred

  A. Compensatory Control
  B. Recovery Control
  C. Detective Control
  D. Corrective Control
  D. Corrective Control

• Question 173:

  Which of the following does not normally influence an organization's retention policy for logs?

  A. Laws
  B. Corporate governance
  C. Regulations
  D. Audits
  D. Audits

• Question 174:

  A Company wants to ensure that its employees can access the network resources from anywhere in the world which access control model is best suited for this scenario

  A. DAC
  B. RBAC
  C. MAC
  D. ABAC
  D. ABAC

• Question 175:

  What is meant by non-repudiation?

  A. If a user does something, they can't later claim that they didn't do it.
  B. Controls to protect the organization's reputation from harm due to inappropriate social media postings by employees, even if on their private accounts and personal time.
  C. It is part of the rules set by administrative controls.
  D. It is a security feature that prevents session replay attacks.
  A. If a user does something, they can't later claim that they didn't do it.

• Question 176:

  A company primary data center goes down due to a hardware failure causing a major disruption to the IT and communications systems. What is the focus of disaster recovery planning in this scenario

  A. Maintaining critical business functions during the disruption
  B. Fixing the hardware failure
  C. Restoring IT and communications back to full operations after the disruptions
  D. Guiding the actions of emergency response personnel during the disruption
  C. Restoring IT and communications back to full operations after the disruptions

• Question 177:

  What is the process of verifying a users identity called?

  A. Confidentiality
  B. Autentication
  C. Authorization
  D. Identification
  B. Autentication

• Question 178:

  255.255.255.0 Address represents

  A. Broadcast
  B. Unicast
  C. Subnet mask
  D. Global Address
  C. Subnet mask

• Question 179:

  Which of the following attacks can TLS help mitigate?

  A. Cross-site Scripting (XSS) Attacks
  B. Social Engineering Attacks
  C. Man-in-the-middle (MiTm) Attacks (Correct)
  D. SQL Injection Attacks
  C. Man-in-the-middle (MiTm) Attacks (Correct)

• Question 180:

  Natalia is concerned about the security of his organization's domain name records and would like to adopt a technology that ensures their authenticity by adding digital signatures. Select the MOST appropriate technology to use?

  A. DNSSIGN
  B. DNSSEC
  C. CERTDNS
  D. DNS2
  B. DNSSEC