ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 311:

  Which type of malware encrypts a users file system and demands payment in exchange of decrypting key

  A. Worm
  B. Trojan
  C. virus
  D. Ransomware
  D. Ransomware

• Question 312:

  In the context of cybersecurity, typical threat actors include the following:

  A. Insiders (either deliberately, by simple human error, or by gross incompetence).
  B. Outside individuals or informal groups (either planned or opportunistic, discovering vulnerability).
  C. Technology (such as free-running bots and artificial intelligence
  D. All
  D. All

• Question 313:

  Which of these is the most efficient and effective way to test a business continuity plan

  A. Simulations
  B. Discussions
  C. Walkthroughs
  D. Reviews
  A. Simulations

• Question 314:

  What is the potential impact of an IPSec reply attack

  A. Modification of network traffic
  B. Disruption of network communication
  C. Unauthorized access to network resources
  D. ALL
  A. Modification of network traffic

• Question 315:

  A large organization is planning to create a DRP. Which of the following is the BEST document to provide a high-level overview of the plan?

  A. Technical guides for IT personnel
  B. Department specific plans
  C. Full copies of the plan for critical disaster recovery team members
  D. Execute summary
  D. Execute summary

• Question 316:

  What is the purpose of non-repudiation in information security?

  A. To ensure data is always accessible when needed
  B. To protect data from unauthorized access
  C. To prevent the sender or recipient of a message from denying having sent or received the message
  D. To ensure data is accurate and unchanged
  C. To prevent the sender or recipient of a message from denying having sent or received the message

• Question 317:

  What is a security token used to authenticate a user to a web application, typically after they log in?

  A. Captcha
  B. API key
  C. CSRF token
  D. Session token
  D. Session token

• Question 318:

  A security practitioner who needs step-by-step instructions to complete a provisioning task

  A. Standard
  B. Policy
  C. Procedure
  D. Laws or Regulations
  C. Procedure

• Question 319:

  Organization experiences a security event that does not affect the confidentiality integrity and availability of its information system. What term BEST describes this situation?

  A. Exploit
  B. Breach
  C. Incident
  D. Event
  D. Event

• Question 320:

  In DAC, the policy specifies that a subject who has been granted access to information can do the following:

  A. Change security attributes on subjects, objects, information systems or system components
  B. Choose the security attributes to be associated with newly created or revised objects
  C. Change the rules governing access control
  D. ALL
  D. ALL