ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 261:

  The documentation of a predetermined set of instructions or procedures to detect, respond to andlimit consequences of a malicious cyberattack against an organization's information systems(s).

  A. IR
  B. IRP
  C. BCP
  D. DRP
  B. IRP

• Question 262:

  The requirement of both the manager and the accountant to approve the transaction fund exceeding $ 50000. Which security concept best suits this

  A. MAC
  B. Defence in Depth
  C. Two Person integrity
  D. Principle of least privilege
  C. Two Person integrity

• Question 263:

  Which of the following best describes the puposes of a business impact analysis?

  A. To document a predetermined set of instructions or procedures for restoring IT and communications services after a disruption
  B. To mitigate security violation and ensure that business operation can continue during a contigency
  C. To provide a high level overview of the disaster recovery plan
  D. To analyze an information systems requirements and functions in order to determine system contingency priorities
  D. To analyze an information systems requirements and functions in order to determine system contingency priorities

• Question 264:

  A backup is which type for security control

  A. Preventive
  B. Deterrent
  C. Recovery
  D. Corrective
  C. Recovery

• Question 265:

  Which of the following best describes the type of technology the team should implement to increase the work effort of buffer overflow attacks?

  A. Address space layout randomization
  B. Memory induction application
  C. Input memory isolation
  D. Read-only memory integrity checks
  A. Address space layout randomization

• Question 266:

  What type of attack does the attacker store and reuse login information. Select the BEST answer?

  A. Man-in-the-middle attack
  B. Smurf attack
  C. DDoS attack
  D. Replay attack
  D. Replay attack

• Question 267:

  Which drives for the IPv6 introduction

  A. IPv4 was not secured
  B. IPv4 not combatible with new devices
  C. Because IPv4 was projected to be exhausted
  D. IPV6 support WiFi
  C. Because IPv4 was projected to be exhausted

• Question 268:

  Which is not possible models for an Incident Response Team (IRT):

  A. Leveraged
  B. Dedicated
  C. Hybrid
  D. Outsourced
  D. Outsourced

• Question 269:

  Hashing used to safe guard which CIA triad

  A. Confidentiality
  B. Availability
  C. Integrity
  D. AII
  C. Integrity

• Question 270:

  Modern solutions try to provide a more holistic approach detecting rootkits, ransomware and spyware.

  A. Antivirus
  B. IDS
  C. IPS
  D. Anti Malware
  D. Anti Malware