ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 331:

  What are registered port used for

  A. Common protocols at the core of TCP/IP model
  B. Used for web servers
  C. Used for in housed or opensource applications
  D. Proprietary applications from vendors and develope
  D. Proprietary applications from vendors and develope

• Question 332:

  Example of Dynamic authorization

  A. DAC
  B. RBAC
  C. MAC
  D. ABAC
  D. ABAC

• Question 333:

  Which of the following is NOT one of the three main components of a sql database?

  A. Views
  B. Schemas
  C. Tables
  D. Object-oriented interfaces
  D. Object-oriented interfaces

• Question 334:

  In which of the following phases of an incident recovery plan the incident responses prioritized

  A. Post incident activity
  B. Containment eradication and recovery
  C. Detection and analysis
  D. Preparation
  C. Detection and analysis

• Question 335:

  What are the primary responsibilities of a computer incident response team (CIRT) during an incident?

  A. To determine the difference between minor and major incident
  B. To troubleshoot network and system issues
  C. To provide medical assistance at accident scenes
  D. To asses the amount and scope of damage caused by the incident
  D. To asses the amount and scope of damage caused by the incident

• Question 336:

  A security event, or combination of security events, that constitutes a secu incident in which an intruder gains, or attempts to gain, access to a system or system resource without authorization

  A. Intrusion
  B. Exploit
  C. Threat
  D. Attack
  A. Intrusion

• Question 337:

  Scans networks to determine everything that is connected as well as other information.

  A. Burbsuite
  B. Wireshark
  C. Fiddler
  D. Zen Mao
  D. Zen Mao

• Question 338:

  When responding to a security incident, your team determines that the vulnerability that was exploited was not widely known to the security community, and that there are no currently known definitions/listings in common vulnerability databases or collections. This vulnerability and exploit might be called______

  A. Malware
  B. Zero-day
  C. Event
  D. Attack
  B. Zero-day

• Question 339:

  What does Personally Identifiable Information (Pll) pertain to?

  A. Information about an individual's health status
  B. Data about an individual that could be used to identify them (Correct)
  C. Trade secrets, research, business plans and intellectual property
  D. The importance assigned to information by its owner
  B. Data about an individual that could be used to identify them (Correct)

• Question 340:

  Which layer provides the services to user?

  A. Application layers
  B. Session Layers
  C. Presentation Layer
  D. Physical Layer
  A. Application layers