ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 321:

  Malicious code that acts like a remotely controlled "robot" for an attacker, with other Trojan and worm capabilities.

  A. Rootkit
  B. Ma I ware
  C. Bot
  D. Virus
  C. Bot

• Question 322:

  A hacker gains access to a compony network and begins to intercept network traffic in order to steal login credentials which OSI layer is being attacked

  A. Data Link layer
  B. Physical layer
  C. Network Layer
  D. Application laver
  D. Application laver

• Question 323:

  Is defined as the process of identifying, estimating and prioritizing risks

  A. Risk Assessment
  B. Risk Treatment
  C. Risk mitigation
  D. Risk Management
  A. Risk Assessment

• Question 324:

  What is the first component the new security engineer should learn about in the incident response plan?

  A. Detection and analysis
  B. Preparation
  C. Containment
  D. Eradication
  B. Preparation

• Question 325:

  What is the primary goal of network segmentation in cybersecurity?

  A. To increase network speed
  B. To isolate and protect critical assets
  C. To centralize data storage
  D. To expand the network's coverage
  B. To isolate and protect critical assets

• Question 326:

  What kind of control is, when we add a backup firewall that takes over if the main one stops working?

  A. Clustering
  B. High availability(HA)
  C. Load balancing
  D. Component redundancy
  B. High availability(HA)

• Question 327:

  Measure of the extent to which an entity is threatened by a potential circumstance or event and likelihood of occurrence

  A. Impact
  B. Risk
  C. Threat
  D. Threat Vector
  B. Risk

• Question 328:

  are events that may indicate that an organization's systems or data have been compromised or that measures put in place to protect them have failed

  A. Exploit
  B. Security Incident
  C. Threat
  D. Rreach
  B. Security Incident

• Question 329:

  A company wants to ensure that its employees cannot bring unauthorized electronic devices into the workspace which physical control is best suited for this

  A. Metal Detectors
  B. Security gaurds
  C. RFID scanners
  D. Baggage X-ray machinces
  A. Metal Detectors

• Question 330:

  Which is an authorized simulated attack performed on a computer system to evaluate its security.

  A. Penetration test
  B. Security Testing
  C. Automated Testing
  D. Regression Testing
  A. Penetration test