ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 351:

  Which maintains that a user or entity should only have access to the spec data, resources and applications needed to complete a required task.

  A. Zero Trust
  B. Defence in Depth
  C. Least Privileges
  D. AII
  C. Least Privileges

• Question 352:

  What is the purpose of defense in depth in information security

  A. To Implement only technical controls to prevent a cyber attack
  B. To provide unrestricted access to organization assets
  C. To establish variable barriers across multiple layers and mission of the organization
  D. To guarantee that a cyber attack will not occur
  C. To establish variable barriers across multiple layers and mission of the organization

• Question 353:

  What does Criticality represents?

  A. The need for consultation with the involved business ensure critical systems are identified and available
  B. The importance an organization gives to data or an information system in performing its operations or achieving its mission
  C. The need for security professional to ensure the appropriate levels of availavility are provided
  D. All of the above
  B. The importance an organization gives to data or an information system in performing its operations or achieving its mission

• Question 354:

  John joined the ISC2 Organizations, his manager asked to check the authentications in security module. What would John use to ensure a certain control is working as he want and expect it to?

  A. Security Testing
  B. Security assessment
  C. Security audit
  D. Security walkthrough
  A. Security Testing

• Question 355:

  Created by switches to logically segment a network without altering its physical topology.

  A. LAN
  B. WAN
  C. VLAN
  D. MAN
  C. VLAN

• Question 356:

  Dylan is creating a cloud architecture that requires connections between systems in two different private VPCs. What would be the best way for Dylan to enable this access?

  A. VPN Connection
  B. Internet Gateway
  C. Public IP Address
  D. VPC Endpoint
  D. VPC Endpoint

• Question 357:

  WF attack in which a subscriber currently authenticated to an Server and connected through a secure session browses to an attacker's website, causing the subscriber to unknowingly invoke unwanted actions at the Server

  A. XSS
  B. CSRF
  C. Spoofing
  D. ALL
  B. CSRF

• Question 358:

  Which is a curated knowledge base and model for cyber adversary behavior, reflecting the various phases of an adversary's attack lifecycle and the platforms they are known to target

  A. MITRE ATTandCK
  B. CVE
  C. Risk Management framework
  D. Security Management
  A. MITRE ATTandCK

• Question 359:

  Example of Token based Authentication

  A. Kerberos
  B. Basic
  C. OAuth
  D. NTLN
  C. OAuth

• Question 360:

  Which of the following physical controls is used to protect against eavesdropping and data theft through electromagnetic radiation

  A. EMI Shielding
  B. Screening rooms
  C. White noise generators
  D. ALL
  A. EMI Shielding