2025 Reliable Study Materials & Testing Engine for CC Exam Success!
Validate your Skills with Updated CC Exam Questions & Answers and Test Engine
NEW QUESTION # 83
Which of the following is an example of a "something you know" authentication factor?
- A. User ID
- B. Fingerprint
- C. Iris scan
- D. Password
Answer: D
NEW QUESTION # 84
Grampon municipal code requires that all companies that operate within city limits will have a set of processes to ensure employees are safe while working with hazardous materials. Triffid Corporation creates a checklist of activities employees must follow while working with hazardous materials inside Grampon city limits. The municipal code is a ______, and the Triffid checklist is a ________.
- A. Law, procedure
- B. Policy, standard
- C. Standard, law
- D. Policy, law
- E. Law, standard
Answer: A
NEW QUESTION # 85
Of the following, which would probably not be considered a threat?
- A. Natural disaster
- B. A laptop with sensitive data on it
- C. Unintentional damage to the system cause by a user
- D. An external attacker trying to gain unauthorized access to the environment
Answer: B
NEW QUESTION # 86
The Triffid Corporation publishes a strategic overview of the company's intent to secure all the data the company possesses. This document is signed by Triffid senior management. What kind of document is this?
- A. Standard
- B. Law
- C. Policy
- D. Procedure
Answer: C
NEW QUESTION # 87
After an attack we have suffered a loss of public confidence, which leg of the CIA was compromised?
Response:
- A. Confidentiality
- B. Availability
- C. Integrity
- D. Encryption
Answer: A
NEW QUESTION # 88
Aphrodite is a member of (ISC)² and a data analyst for Triffid Corporation. While Aphrodite is reviewing user log data, Aphrodite discovers that another Triffid employee is violating the acceptable use policy and watching streaming videos during work hours. What should Aphrodite do?
- A. Inform Triffid management
- B. Inform (ISC)2
- C. Nothing
- D. Inform law enforcement
Answer: A
NEW QUESTION # 89
If two people want to use symmetric encryption to conduct a confidential conversation, how many keys do they need?
- A. 0
- B. 1
- C. 2
- D. None
Answer: C
NEW QUESTION # 90
Carol is browsing the Web. Which of the following ports is she probably using?
- A. 0
- B. 1
- C. 2
- D. 3
Answer: D
NEW QUESTION # 91
Which of the following is likely to be included in the business continuity plan?
- A. Log data from all systems
- B. Alternate work areas for personnel affected by a natural disaster
- C. Last year's budget information
- D. The organization's approach security approach
Answer: B
NEW QUESTION # 92
Prina is a database manager. Prina is allowed to add new users to the database, remove current users and create new usage functions for the users. Prina is not allowed to read the data in the fields of the database itself. This is an example of:
- A. Role-based access controls (RBAC)
- B. Alleviating threat access controls (ATAC)
- C. Discretionary access controls (DAC)
- D. Mandatory access controls (MAC)
Answer: A
NEW QUESTION # 93
Tina is an (ISC)² member and is invited to join an online group of IT security enthusiasts. After attending a few online sessions, Tina learns that some participants in the group are sharing malware with each other, in order to use it against other organizations online. What should Tina do?
- A. Nothing
- B. Stop participating in the group
- C. Report the group to law enforcement
- D. Report the group to (ISC)2
Answer: B
NEW QUESTION # 94
Triffid Corporation has a rule that all employees working with sensitive hardcopy documents must put the documents into a safe at the end of the workday, where they are locked up until the following workday. What kind of control is the process of putting the documents into the safe?
- A. Administrative
- B. Technical
- C. Physical
- D. Tangential
Answer: A
NEW QUESTION # 95
A vendor sells a particular operating system (OS). In order to deploy the OS securely on different platforms, the vendor publishes several sets of instructions on how to install it, depending on which platform the customer is using. This is an example of ______.
- A. Standard
- B. Law
- C. Procedure
- D. Policy
Answer: C
NEW QUESTION # 96
Which of the following would be best placed in the DMZ of an IT environment?
- A. Mail server
- B. SIEM log storage
- C. Database engine
- D. User's workplace laptop
Answer: A
NEW QUESTION # 97
Jengi is setting up security for a home network. Jengi decides to configure MAC address filtering on the router, so that only specific devices will be allowed to join the network. This is an example of a(n)_______ control.
- A. Administrative
- B. Technical
- C. Substantial
- D. Physical
Answer: B
NEW QUESTION # 98
______ is used to ensure that configuration management activities are effective and enforced.
- A. Identification
- B. Inventory
- C. Baseline
- D. Verification and audit
Answer: D
NEW QUESTION # 99
What is the goal of Business Continuity efforts?
- A. Keep critical business functions operational
- B. Ensure all IT system continue to operate
- C. Impress customers
- D. Save money
Answer: A
NEW QUESTION # 100
What is the risk associated with delaying resumption of full normal operations after a disaster?
- A. Competition
- B. People might be put in danger
- C. A new disaster might emerge
- D. The impact of running alternate operations for extended periods
Answer: D
NEW QUESTION # 101
A VLAN is a _____ method of segmenting networks.
- A. Secret
- B. Regulated
- C. Logical
- D. Physical
Answer: C
NEW QUESTION # 102
Data _____ is data left behind on systems/media after normal deletion procedures have been attempted.
- A. Fragments
- B. Residue
- C. Packets
- D. Remanence
Answer: D
NEW QUESTION # 103
Suvid works at Triffid, Inc. When Suvid attempts to log in to the production environment, a message appears stating that Suvid has to reset the password. What may have occurred to cause this
- A. Suvid made the manager angry
- B. Suvid's password has expired
- C. Suvid broke the law
- D. Someone hacked Suvid's machine
Answer: B
NEW QUESTION # 104
What is the overall objective of a disaster recovery (DR) effort?
- A. Return to normal, full operations
- B. Enhance public perception of the organization
- C. Save money
- D. Preserve critical business functions during a disaster
Answer: A
NEW QUESTION # 105
A device that is commonly useful to have on the perimeter between two networks.
- A. User laptop
- B. Camera
- C. IoT
- D. Firewall
Answer: D
NEW QUESTION # 106
......
Regular Free Updates CC Dumps Real Exam Questions Test Engine: https://www.examslabs.com/ISC/ISC-Certification/best-CC-exam-dumps.html
Tested & Approved CC Study Materials Download: https://drive.google.com/open?id=1Ze4PKeKJR-BvSh5cq6AatdXuO0y9HqhU