CC ISC2 Exam Questions and Free Practice Test

Question 49

Which type of attack attempts to gain information by observing the devices power consumption

A. DOS

B. Side Channles

C. XSS

D. XSRF

Correct Answer:B

Question 50

What does Personally Identifiable Information (Pll) pertain to?

A. Information about an individual's health status

B. Data about an individual that could be used to identify them (Correct)

C. Trade secrets, research, business plans and intellectual property

D. The importance assigned to information by its owner

Correct Answer:B

Question 51

Devid is worried about distributed denial of service attacks against his company's primary web application, which of the following options will provide the MOST resilience against large-scale ddos attacks?

A. Implement a CDN

B. Increase the number of servers in the web application server cluster

C. Contract for DDoS mitigation services via the company's IPS

D. Increase the amount of bandwidth available from one or more ISPs

Correct Answer:A

Question 52

A portion of the organization's network that interfaces directly with the outside world; typically, this exposed area has more security controls and restrictions than the rest of the internal IT environment.

A. Virtual private network (VPN)

B. Virtual local area network (VLAN)

C. Zero Trust

D. Demilitarized zone (DMZ)

Correct Answer:D

Question 53

What is the purpose of multi-factor authentication (MFA) in 1AM?

A. To simplify user access

B. To eliminate the need for authentication

C. To add an additional layer of security by requiring multiple forms of verification

D. To grant unrestricted access to all users

Correct Answer:C

Question 54

Which is the component of a Business Continuity (BC) plan

A. Immediate response procedures and checklists

B. Notification systems and call trees for alerting personnel

C. Guidance for management, including designation of authority for specific managers

D. ALL

Correct Answer:D

START CC EXAM