Free ISC-CC Exam Dumps Preview

Question 1

Single choice

DevOps team has updated the application source code, Tom has discovered that many unauthorized changes have been made.

What is the BEST control Tom can implement to prevent a recurrence of this problem?

1. A

   Backup

2. B

   File labels

3. C

   Security audit

4. D

   Hashing

Reveal answer details Close answer details

Correct answerD

Question 2

Single choice

Which threats are directly associated with malware? Select that apply.

1. A

   APT

2. B

   Ransomeware

3. C

   Trojan

4. D

   DDOS

Reveal answer details Close answer details

Correct answerC

Question 3

Single choice

DDOS attack affect which OSI layer

1. A

   Network layer

2. B

   Transport layer

3. C

   Physical Layer

4. D

   Both A and B

Reveal answer details Close answer details

Correct answerD

Question 4

Single choice

Which of the following is very likely to be used in a disaster recovery (DR) effort?

1. A

   Guard dogs

2. B

   Contract personnel

3. C

   Data backups

4. D

   Anti-malware solutions

Reveal answer details Close answer details

Correct answerC

Question 5

Single choice

What is privacy in the context of Information Security?

1. A

   Protecting data from unauthorized access

2. B

   Ensuring data is accurate and unchanged

3. C

   Making sure data is always accessible when needed.

4. D

   Disclosed without their consent

Reveal answer details Close answer details

Correct answerA

Question 6

Single choice

Which of the following is not a feature of a cryptographic hash function

1. A

   Deterministic

2. B

   Unique

3. C

   Useful

4. D

   Reversible

Reveal answer details Close answer details

Correct answerD

Question 7

Single choice

Which of the following is a common security measure to prevent Cross Site Scripting (XSS) attacks in web applications?

1. A

   implementing strong password policies

2. B

   using a firewall to block incoming traffic

3. C

   validating and sanitizing user input (Correct)

4. D

   encrypting data during transmission

Reveal answer details Close answer details

Correct answerC

Question 8

Single choice

Exhibit.

How many keys would be required to support 50 users in an asymmetric cryptography system?

1. A

   100

2. B

   200

3. C

   50

4. D

   1225

Reveal answer details Close answer details

Correct answerA

Question 9

Single choice

Which plan provides the team with immediate response procedures and check lists and guidance for management?

1. A

   BCP

2. B

   IRP

3. C

   DRP

4. D

   ALL

Reveal answer details Close answer details

Correct answerA

Question 10

Single choice

What is the main purpose of using multi-factor authentication (MFA) in a security system?

1. A

   To prevent data breaches

2. B

   To protect against malware

3. C

   To ensure data integrity

4. D

   To add an extra layer of security to user authentication

Reveal answer details Close answer details

Correct answerD

Question 11

Single choice

A one-way spinning door or barrier that allows only one person at a time to enter a building or pass through an area.

1. A

   Turnstile

2. B

   ManTrap

3. C

   Bollard

4. D

   Gate

Reveal answer details Close answer details

Correct answerA

Question 12

Single choice

What is Remanence

1. A

   The ability of retaining magnetization in storage disk after deletion

2. B

   Files or pieces of files get scattered throughout your disks.

3. C

   Data corruption due to disk failure

4. D

   AII

Reveal answer details Close answer details

Correct answerA

Question 13

Single choice

DNS works in which OSI layer

1. A

   Physical Layer

2. B

   Network Layer

3. C

   Application layer

4. D

   DataLink Layer

Reveal answer details Close answer details

Correct answerC

Question 14

Single choice

A popular way of implementing "least privilege''

1. A

   MAC

2. B

   DAC

3. C

   RBAC

4. D

   ABAC

Reveal answer details Close answer details

Correct answerC

Question 15

Single choice

What is the purpose of non-repudiation in information security?

1. A

   To ensure data is always accessible when needed

2. B

   To protect data from unauthorized access

3. C

   To prevent the sender or recipient of a message from denying having sent or received the message

4. D

   To ensure data is accurate and unchanged

Reveal answer details Close answer details

Correct answerC

Question 16

Single choice

Faking the sender address in a transmission to gain illegal entry into a secure system

1. A

   Phishing

2. B

   ARP

3. C

   Spoofing

4. D

   ALL

Reveal answer details Close answer details

Correct answerC

Question 17

Single choice

Protection against an individual falsely denying having performed a particular action

1. A

   Authentication

2. B

   Identification

3. C

   Verification

4. D

   Non repudiation

Reveal answer details Close answer details

Correct answerD

Question 18

Single choice

What is multi-factor authentication (MFA)?

1. A

   A type of authentication that uses only one method

2. B

   A type of authentication that uses only two methods

3. C

   A type of authentication that uses more than two methods (Correct)

4. D

   A type of authentication that uses only one factor

Reveal answer details Close answer details

Correct answerC

Question 19

Single choice

Which is a curated knowledge base and model for cyber adversary behavior, reflecting the various phases of an adversary's attack lifecycle and the platforms they are known to target

1. A

   MITRE ATT&CK

2. B

   CVE

3. C

   Risk Management framework

4. D

   Security Management

Reveal answer details Close answer details

Correct answerA

Question 20

Single choice

Dylan is creating a cloud architecture that requires connections between systems in two different private VPCs.

What would be the best way for Dylan to enable this access?

1. A

   VPN Connection

2. B

   Internet Gateway

3. C

   Public IP Address

4. D

   VPC Endpoint

Reveal answer details Close answer details

Correct answerD

Question 21

Single choice

Exhibit.

IPSec works in which layer of OSI Model

1. A

   Layer 2

2. B

   Layer 5

3. C

   Layer 3

4. D

   Layer 7

Reveal answer details Close answer details

Correct answerC

Question 22

Single choice

An employee unintentionally shares confidential information with an unauthorized party.

What term best describes this situation?

1. A

   Event

2. B

   Exploit

3. C

   Intrusion

4. D

   Breach

Reveal answer details Close answer details

Correct answerD

Question 23

Single choice

Why is security training important?

1. A

   Because it fulfills regulatory requirements.

2. B

   Because it helps people to perform their job duties more efficiently.

3. C

   Because it reduces the risk of certain types of attacks, like social engineering.

4. D

   AII

Reveal answer details Close answer details

Correct answerC

Question 24

Single choice

Which of the following does not normally influence an organization's retention policy for logs?

1. A

   Laws

2. B

   Corporate governance

3. C

   Regulations

4. D

   Audits

Reveal answer details Close answer details

Correct answerD

Question 25

Single choice

Incident management is also known as

1. A

   Risk Management

2. B

   Business Continuity management

3. C

   Incident management

4. D

   Crisis management

Reveal answer details Close answer details

Correct answerD

Question 26

Single choice

What goal of security is enhanced by a strong business continuity program?

1. A

   non-repudiation

2. B

   Availability

3. C

   Confidentiality

4. D

   Integrity

Reveal answer details Close answer details

Correct answerB

Question 27

Single choice

A large organization is planning to create a DRP.

Which of the following is the BEST document to provide a high-level overview of the plan?

1. A

   Technical guides for IT personnel

2. B

   Department specific plans

3. C

   Full copies of the plan for critical disaster recovery team members

4. D

   Execute summary

Reveal answer details Close answer details

Correct answerD

Question 28

Single choice

Which ensure maintaining business operations during or after an incident

1. A

   Incident Response

2. B

   Business Continuity

3. C

   Disaster Recovery

4. D

   AII

Reveal answer details Close answer details

Correct answerC

Question 29

Single choice

The testing or evaluation of security controls to determine the extent to which the controls are implemented correctly, operating as intended, and producing the desired outcome with respect to meeting the security requirements for an information system or organization.

1. A

   Security Assessment

2. B

   Risk Assessment

3. C

   DRP

4. D

   IRP

Reveal answer details Close answer details

Correct answerA

Question 30

Single choice

What does Criticality represents?

1. A

   The need for consultation with the involved business ensure critical systems are identified and available

2. B

   The importance an organization gives to data or an information system in performing its operations or

   achieving its mission

3. C

   The need for security professional to ensure the appropriate levels of availavility are provided

4. D

   All of the above

Reveal answer details Close answer details

Correct answerB

Question 31

Single choice

Which of the following best describes the puposes of a business impact analysis?

1. A

   To document a predetermined set of instructions or procedures for restoring IT and communications

   services after a disruption

2. B

   To mitigate security violation and ensure that business operation can continue during a contigency

3. C

   To provide a high level overview of the disaster recovery plan

4. D

   To analyze an information systems requirements and functions in order to determine system

   contingency priorities

Reveal answer details Close answer details

Correct answerD

Question 32

Single choice

Load balancing safe guard which CIA triad

1. A

   Confidentiality

2. B

   Availablity

3. C

   Integrity

4. D

   All

Reveal answer details Close answer details

Correct answerB

Question 33

Single choice

A chief information security officer (CISO) at a large organization documented a policy that establishes the acceptable use of cloud environments for all staff. This is an example of

1. A

   Technical control

2. B

   Physical control

3. C

   Cloud control

4. D

   Management/Administrative control

Reveal answer details Close answer details

Correct answerD

Question 34

Single choice

which is the short form of IPv6 address 2001:0db8:0000:0000:0000:ffff:0000:0001

1. A

   2001:db8::ffff:0:1

2. B

   2001:db8:0000:ffff:0:1

3. C

   2001:db80::ffff:0000:1

4. D

   2001:db8::ffff:0000:0001

Reveal answer details Close answer details

Correct answerA

Question 35

Single choice

The Bell and LaPadula access control model is a form of

1. A

   RBAC

2. B

   MAC

3. C

   DAC

4. D

   ABAC

Reveal answer details Close answer details

Correct answerB

Question 36

Single choice

Representation of data at Layer 3 of the Open Systems Interconnection (OSI) model.

1. A

   Segment

2. B

   Packet

3. C

   Frame

4. D

   None of the Above

Reveal answer details Close answer details

Correct answerB

Question 37

Single choice

What are the primary responsibilities of a computer incident response team (CIRT) during an incident?

1. A

   To determine the difference between minor and major incident

2. B

   To troubleshoot network and system issues

3. C

   To provide medical assistance at accident scenes

4. D

   To asses the amount and scope of damage caused by the incident

Reveal answer details Close answer details

Correct answerD

Question 38

Single choice

Which is an authorized simulated attack performed on a computer system to evaluate its security.

1. A

   Penetration test

2. B

   Security Testing

3. C

   Automated Testing

4. D

   Regression Testing

Reveal answer details Close answer details

Correct answerA

Question 39

Single choice

A new BYOD policy has been enforced in NEW Corp which type of control is used to enforce thissecurity policies

1. A

   Physical control

2. B

   Logical Control

3. C

   Administrative Control

4. D

   Technical Control

Reveal answer details Close answer details

Correct answerC

Question 40

Single choice

Which of the following is not a protocol of the OSI layer 3

1. A

   IGMP

2. B

   IP

3. C

   ICMP

4. D

   SSH

Reveal answer details Close answer details

Correct answerD

Question 41

Single choice

Risk tolerance also known as

1. A

   Risk threshold

2. B

   Risk appetite

3. C

   Acceptable risk

4. D

   AII

Reveal answer details Close answer details

Correct answerD

Question 42

Single choice

What is the primary factor in the reliability of information and system

1. A

   Authenticity

2. B

   Confidentiality

3. C

   Integrity

4. D

   Availability

Reveal answer details Close answer details

Correct answerC

Question 43

Single choice

organization experiences a security event that potentially jeopardizes the confidentiality, integrity or availability of its information system.

What term best describes this situation?

1. A

   Breach

2. B

   Event

3. C

   Incident

4. D

   Exploit

Reveal answer details Close answer details

Correct answerC

Question 44

Single choice

Type 1 authentication posses

1. A

   Users may share their credential with others

2. B

   User may forgot their passwords

3. C

   Passwords may be intercepted and stolen

4. D

   ALL

Reveal answer details Close answer details

Correct answerD

Question 45

Single choice

What does internal consistency of information refer to

1. A

   Data being accurate, usefull and complete

2. B

   Data being protected from errors or loss of information

3. C

   All instances of data being identical in form content and meaning

4. D

   Data being displayed and stored the same way on all system

Reveal answer details Close answer details

Correct answerC

Question 46

Single choice

Common network device used to connect networks?

1. A

   Server

2. B

   Endpoint

3. C

   Router

4. D

   Switch

Reveal answer details Close answer details

Correct answerC

Question 47

Single choice

Ignoring the risk and proceeding the business operations

1. A

   Risk Acceptance

2. B

   Risk Mitigation

3. C

   Risk Avoidance

4. D

   Risk Transfer

Reveal answer details Close answer details

Correct answerA

Question 48

Single choice

Which of the following properties is not guaranteed by Digital signatures

1. A

   Authentication

2. B

   Confidentiality

3. C

   Non-Repudiation

4. D

   Integrity

Reveal answer details Close answer details

Correct answerB

Question 49

Single choice

A Company wants to ensure that its employees can access the network resources from anywhere in the world which access control model is best suited for this scenario

1. A

   DAC

2. B

   RBAC

3. C

   MAC

4. D

   ABAC

Reveal answer details Close answer details

Correct answerD

Question 50

Single choice

A organization's security system which involves in preventing, detecting, analyzing, and responding to cybersecurity incidents.

1. A

   Business continuity team

2. B

   Disaster recovery team

3. C

   Incident response team

4. D

   Security operations center

Reveal answer details Close answer details

Correct answerD

Question 51

Single choice

The requirement of both the manager and the accountant to approve the transaction fund exceeding $
50000. Which security concept best suits this

1. A

   MAC

2. B

   Defence in Depth

3. C

   Two Person integrity

4. D

   Principle of least privilege

Reveal answer details Close answer details

Correct answerC

Question 52

Single choice

A company network has been infected with malware and all its servers are down.

What is the first step that the Disaster Recovery team should take to restore the systems?

1. A

   Disconnect the affected systems from the network

2. B

   Conduct a risk assessment of determine the extent of the damage

3. C

   Restore data from backup systems

4. D

   Contact the enforcement to investigate the cyberattack

Reveal answer details Close answer details

Correct answerA

Question 53

Single choice

Government can imposes financial penalties as a consequence of breaking a

1. A

   Standard

2. B

   Regulation

3. C

   Policy

4. D

   Procedures

Reveal answer details Close answer details

Correct answerB

Question 54

Single choice

A company needs to protect its confidential data from unauthorized access which logical control is best suited for this scenario

1. A

   Encryption

2. B

   Firewall

3. C

   Antivirus

4. D

   Hashing

Reveal answer details Close answer details

Correct answerA

Question 55

Single choice

What is the potential impact of an IPSec reply attack

1. A

   Modification of network traffic

2. B

   Disruption of network communication

3. C

   Unauthorized access to network resources

4. D

   ALL

Reveal answer details Close answer details

Correct answerA

Question 56

Single choice

A cyber security professional observes an unusual occurrence in the network or system. What term best describes this situations

1. A

   Breach

2. B

   Exploit

3. C

   Event

4. D

   Intrusion

Reveal answer details Close answer details

Correct answerC

Question 57

Single choice

Networks are often micro segmented networks, with firewalls at nearly every connecting point

1. A

   DMZ

2. B

   VPN

3. C

   VLAN

4. D

   Zero Trust

Reveal answer details Close answer details

Correct answerA

Question 58

Single choice

A device that routes traffic to the port of a known device

1. A

   Switch

2. B

   Hub

3. C

   Router

4. D

   Ethernet

Reveal answer details Close answer details

Correct answerA

Question 59

Single choice

Which of the following is not an element of system security configuration management

1. A

   Baselines

2. B

   Updates

3. C

   Inventory

4. D

   Audit logs

Reveal answer details Close answer details

Correct answerD

Question 60

Single choice

The internet standards organization, made up of network designers, operators, vendors and researchers, that defines protocol standards

1. A

   ISO

2. B

   NIST

3. C

   IETF

4. D

   GDPR

Reveal answer details Close answer details

Correct answerC

Question 61

Single choice

Juli is listening to network traffic and capturing passwords as they are sent to the authentication server. She plans to use the passwords as part of a future attack.

What type of attack is this?

1. A

   Brute-force attack

2. B

   Dictionary attack

3. C

   Social engineering attack

4. D

   Replay attack

Reveal answer details Close answer details

Correct answerD

Question 62

Single choice

A structured approach used to oversee and manage risk for an enterprise

1. A

   Risk Assessment

2. B

   Risk threshold

3. C

   Risk Management Framework

4. D

   Risk appetite

Reveal answer details Close answer details

Correct answerC