ISC ISC-CC Online Practice Questions and Exam Preparation

ISC ISC-CC Online Questions & Answers

• Question 81:

  EKristal is the security administrator for a large online service provider. Kristal learns that the company is harvesting personal data of its customers and sharing the data with local governments where the company operates, without the knowledge of the users, to allow the governments to persecute users on the basis of their political and philosophical beliefs. The published user agreement states that the company will not share personal user data with any entities without the users' explicit permission. According to the ISC2 Code of Ethics, to whom does Kristal ultimately report in this situation?

  A. The company Kristal works for
  B. The governments of the countries where the company operates
  C. ISC2
  D. The users
  D. The users

• Question 82:

  A hacker gains access to an organization system without authorization and steal confidential data. What term best describes this ?

  A. Event
  B. Breach
  C. Intrusion
  D. Exploit
  C. Intrusion

• Question 83:

  What is IPSEC reply attack

  A. An attack where an attacker modifies packets in transit
  B. An attack where an attacker eavesdrops on network traffic
  C. An attack where an attacker overloads a network with traffic
  D. An attack where an attacker attempts to inject packets in an existing sessio
  D. An attack where an attacker attempts to inject packets in an existing sessio

• Question 84:

  Type 1 authentication posses

  A. Users may share their credential with others
  B. User may forgot their passwords
  C. Passwords may be intercepted and stolen
  D. ALL
  D. ALL

• Question 85:

  An unknown person obtaining access to the company file system without authorization is example of

  A. Intrusion
  B. Breach
  C. Exploit
  D. Incident
  B. Breach

• Question 86:

  Works via encapsulation and wrapping a packet inside another packet.

  A. Network segmentation
  B. Load balancing
  C. Tunnelling
  D. Data encryption
  C. Tunnelling

• Question 87:

  Which of the following is NOT one of the four typical ways of managing risk?

  A. Accept
  B. Avoid
  C. Mitigate
  D. Monitor
  D. Monitor

• Question 88:

  Which of the following is not a feature of a cryptographic hash function

  A. Deterministic
  B. Unique
  C. Useful
  D. Reversible
  D. Reversible

• Question 89:

  Actions, processes and tools for ensuring an organization can continue critical operations during a contingency.

  A. BC
  B. DR
  C. IR
  D. AII
  A. BC

• Question 90:

  A structured approach used to oversee and manage risk for an enterprise

  A. Risk Assessment
  B. Risk threshold
  C. Risk Management Framework
  D. Risk appetite
  C. Risk Management Framework