ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 21:

  The purpose of risk identification:

  A. Employees at all levels of the organization are responsible for identifying risk.
  B. Identify risk to communicate it clearly.
  C. Identify risk to protect against it.
  D. ALL
  D. ALL

• Question 22:

  TCP and UDP reside at which layer of the osi model?

  A. Session
  B. Transport
  C. Data link
  D. Presentation
  D. Presentation

• Question 23:

  Which of the following is a systematic approach to protecting against cyber threats that involves a continuous cycle of identifying, assessing and prioritizing risks and implementing measures to reduce or eliminate those risks?

  A. Security Assessment
  B. Incident response
  C. Peneteration testing
  D. Risk Management
  D. Risk Management

• Question 24:

  Is a way to prevent unwanted devices from connecting to a network.

  A. DMZ
  B. VPN
  C. VLAN
  D. NAC
  D. NAC

• Question 25:

  A company wants to ensure that its employees can evacuate the building in case of an emergency which physical control is best suited for this scenario

  A. Fire Alarms
  B. Exit signs
  C. Emergency lighting
  D. Emergency exit doors
  D. Emergency exit doors

• Question 26:

  Government can imposes financial penalties as a consequence of breaking a

  A. Standard
  B. Regulation
  C. Policy
  D. Procedures
  B. Regulation

• Question 27:

  Exhibit.

  

  IPSec works in which layer of OSI Model

  A. Layer 2
  B. Layer 5
  C. Layer 3
  D. Layer 7
  C. Layer 3

• Question 28:

  What is the purpose of multi-factor authentication (MFA) in 1AM?

  A. To simplify user access
  B. To eliminate the need for authentication
  C. To add an additional layer of security by requiring multiple forms of verification
  D. To grant unrestricted access to all users
  C. To add an additional layer of security by requiring multiple forms of verification

• Question 29:

  Events with a negative consequence, such as system crashes, network packet floods, unauthorized use of system privileges, defacement of a web page or execution of malicious code that destroys data.

  A. Breach
  B. Incident
  C. Adverse Event
  D. Exploit
  C. Adverse Event

• Question 30:

  Which OSI layer VPN works

  A. Layer 5
  B. Layer 6
  C. Layer 1
  D. Layer 3
  D. Layer 3