ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 281:

  What is the first phase in System Development Life Cycle

  A. Requirements Analysis Phase
  B. Feasibilty Study
  C. Design Phase
  D. Development Phase
  B. Feasibilty Study

• Question 282:

  A popular way of implementing "least privilege''

  A. MAC
  B. DAC
  C. RBAC
  D. ABAC
  C. RBAC

• Question 283:

  Which of the following is not a source of redundant power

  A. Generator
  B. Utility
  C. UPS
  D. HVAC
  D. HVAC

• Question 284:

  Which security control mostly used to prevent data breach

  A. Physical control
  B. Logical Control
  C. Adminstrative Control
  D. RBAC
  B. Logical Control

• Question 285:

  System capabilities designed to detect and prevent the unauthorized use and transmission of information.

  A. SOC
  B. SIEM solutions
  C. Data Loss Prevention
  D. Crytography
  C. Data Loss Prevention

• Question 286:

  Which of the following types of vulnerabilities cannot be discovered in the course of a routine vulnerability assessment?

  A. Zero-day vulnerability
  B. Kernel flaw
  C. Buffer overflow
  D. File and directory permissions
  A. Zero-day vulnerability

• Question 287:

  What does a breach refer to in the context of cybersecurity

  A. An unauthorized access to a system or system recours
  B. Any observable occurance in a network or system
  C. A deiberate security incident
  D. A previously know system vulnerablity
  A. An unauthorized access to a system or system recours

• Question 288:

  What is the purpose of immediate response procedures and checklists in a BCP

  A. To notify personnel that the BCP is being enacted
  B. To provide guidance for management
  C. To safeguard the confidentiality, integrity and availability of information
  D. To ensure business operations are accounted for in the plan
  A. To notify personnel that the BCP is being enacted

• Question 289:

  The primary functionality of PAM is?

  A. Validate the level of access a user have to a file
  B. Prevent unauthorized access to organizational assets
  C. Provide just-in-time access to critical resources
  D. Manage centralized access control
  C. Provide just-in-time access to critical resources

• Question 290:

  Which plan is activated when both the Incident response and BCP fails

  A. Risk Management
  B. BIA
  C. DRP
  D. None
  C. DRP