ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 51:

  A device that routes traffic to the port of a known device

  A. Switch
  B. Hub
  C. Router
  D. Ethernet
  A. Switch

• Question 52:

  A company security team detected a cyber attack against it information systems and activates a set of procedures to mitigate the attack., What type of plan is this?

  A. Business continuty plan
  B. Incident response plan
  C. Disaster recvoery plan
  D. Security operation plan
  B. Incident response plan

• Question 53:

  Devid's team recently implemented a new system that gathers information from a variety of different log sources, analyses that information, and then triggers automated playbooks in response to security events, what term BEST describes this technology?

  A. SIEM
  B. Log Repository
  C. IPS
  D. SOAR
  D. SOAR

• Question 54:

  Requires that all instances of the data be identical in form,

  A. Confidentiality
  B. Availability
  C. Consistency
  D. ALL
  C. Consistency

• Question 55:

  Which of the following is not an element of system security configuration management

  A. Baselines
  B. Updates
  C. Inventory
  D. Audit logs
  D. Audit logs

• Question 56:

  A Company critical functions were disrupted due to a system outage. What plan should theorganization have in place to sustain these operations during and after a significant disruptions?

  A. DRP
  B. BCP
  C. IRP
  D. ALL
  B. BCP

• Question 57:

  Which of the following principles aims primarily at fraud detection

  A. Defense in depth
  B. Least privilege
  C. Separation of duties
  D. Privileged account
  C. Separation of duties

• Question 58:

  Information should be consistently and readily accessible for authorized parties ?

  A. Confidentiality
  B. Authentication
  C. Availability
  D. Non-repudiation
  C. Availability

• Question 59:

  Natalia is concerned that users on her network may be storing sensitive information, such as social security numbers, on their hard drives without proper authorization or security controls. What 3rd -party security service can she implement to best detect this activity?

  A. IDS - Intrusion Detection System
  B. IPS - Intrusion Prevention System
  C. DLP - Data Loss Protection
  D. TLS - Transport Layer Security
  C. DLP - Data Loss Protection

• Question 60:

  When Operating in A Cloud Environment, What Cloud Deployment Model Provides Security Teams With The Greatest Access To Forensic Information?

  A. FaaS
  B. SaaS
  C. PaaS
  D. laaS
  D. laaS