ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 221:

  What is privacy in the context of Information Security?

  A. Protecting data from unauthorized access
  B. Ensuring data is accurate and unchanged
  C. Making sure data is always accessible when needed.
  D. Disclosed without their consent
  A. Protecting data from unauthorized access

• Question 222:

  When responding to a security incident, your team determines that the vulnerability that was exploited was not widely known to the security community, and that there are no currently known definitions/listings in common vulnerability databases or collections. This vulnerability and exploit might be called______

  A. Malware
  B. Zero-day
  C. Event
  D. Attack
  B. Zero-day

• Question 223:

  Dani is an ISC2 member and an employee of New Corporation. One of Dani's colleagues offers to share a file that contains an illicit copy of a newly released movie. What should Dani do

  A. Inform ISC2
  B. Inform law enforcement
  C. Accept the movie
  D. Refuse to accept
  D. Refuse to accept

• Question 224:

  Which document serve as specifications for the implementation of policy and dictates mandatory requirements

  A. Policy
  B. Guideline
  C. Standard
  D. Procedures
  C. Standard

• Question 225:

  Juli is listening to network traffic and capturing passwords as they are sent to the authentication server. She plans to use the passwords as part of a future attack. What type of attack is this?

  A. Brute-force attack
  B. Dictionary attack
  C. Social engineering attack
  D. Replay attack
  D. Replay attack

• Question 226:

  Which of the following is a common security measure to prevent Cross Site Scripting (XSS) attacks in web applications?

  A. implementing strong password policies
  B. using a firewall to block incoming traffic
  C. validating and sanitizing user input (Correct)
  D. encrypting data during transmission
  C. validating and sanitizing user input (Correct)

• Question 227:

  Which of the following is a subject?

  A. file
  B. fence
  C. filename
  D. user
  D. user

• Question 228:

  In what way do a victim's files get affected by ransomware?

  A. By destroying them
  B. By encrypting them
  C. By stealing them
  D. By selling them
  B. By encrypting them

• Question 229:

  6 Which access control method uses attributes and rules to define access policies that are evaluate by a central Policy Decision Point (PDP)

  A. DAC
  B. RBAC
  C. MAC
  D. ABAC
  D. ABAC

• Question 230:

  A company has implemented Mandatory access control for its confidential data which of the following statement is true

  A. The data can be accessed by users who possess a need to know
  B. Access controls cannot be changed by anyone except the system administrato
  C. The owner of the data can modify the access control
  D. The system adminstrator can change the access contrls
  B. Access controls cannot be changed by anyone except the system administrato