(PDF) ISC Certification CC Exam and Certification Test Engine
Use CC Exam Dumps (2025 PDF Dumps) To Have Reliable CC Test Engine
NEW QUESTION # 53
When an attacker is using a brute force attack to break a password, what are they doing?
Response:
- A. Trying to recover the key without breaking the encryption.
- B. Looking at common letter frequency to guess the plaintext.
- C. Trying every possible key to, over time, break any encryption.
- D. Looking at the hash values and comparing it to thousands or millions of pre-calculated hashes.
Answer: C
NEW QUESTION # 54
After an attack we have suffered a loss of public confidence, which leg of the CIA was compromised?
Response:
- A. Integrity
- B. Encryption
- C. Availability
- D. Confidentiality
Answer: D
NEW QUESTION # 55
An attacker outside the organization attempts to gain access to the organization's internal files. This is an example of a(n) ______.
- A. Publication
- B. Exploit
- C. Disclosure
- D. Intrusion
Answer: D
NEW QUESTION # 56
The concept that the deployment of multiple types of controls provides better security than using a single type of control.
- A. Least privilege
- B. Internet
- C. VPN
- D. Defense in depth
Answer: D
NEW QUESTION # 57
Triffid, Inc., has deployed anti-malware solutions across its internal IT environment. What is an additional task necessary to ensure this control will function properly?
- A. Install a monitoring solution to check the anti-malware solution
- B. Update the anti-malware solution regularly
- C. Pay all employees a bonus for allowing anti-malware solutions to be run on their systems
- D. Alert the public that this protective measure has been taken
Answer: B
NEW QUESTION # 58
Gary is an attacker. Gary is able to get access to the communication wire between Dauphine's machine and Linda's machine and can then surveil the traffic between the two when they're communicating. What kind of attack is this?
- A. On-path
- B. Physical
- C. Side channel
- D. DDOS
Answer: A
NEW QUESTION # 59
Larry and Fern both work in the data center. In order to enter the data center to begin their workday, they must both present their own keys (which are different) to the key reader, before the door to the data center opens.
Which security concept is being applied in this situation?
- A. Least privilege
- B. Defense in depth
- C. Dual control
- D. Segregation of duties
Answer: C
NEW QUESTION # 60
Triffid Corporation has a rule that all employees working with sensitive hardcopy documents must put the documents into a safe at the end of the workday, where they are locked up until the following workday. What kind of control is the process of putting the documents into the safe?
- A. Physical
- B. Technical
- C. Administrative
- D. Tangential
Answer: C
NEW QUESTION # 61
The common term for systems that ensure proper temperature and humidity in the data center.
- A. HVAC
- B. RBAC
- C. MAC
Answer: A
NEW QUESTION # 62
Grampon municipal code requires that all companies that operate within city limits will have a set of processes to ensure employees are safe while working with hazardous materials. Triffid Corporation creates a checklist of activities employees must follow while working with hazardous materials inside Grampon city limits. The municipal code is a ______, and the Triffid checklist is a ________.
- A. Law, standard
- B. Standard, law
- C. Policy, law
- D. Policy, standard
- E. Law, procedure
Answer: E
NEW QUESTION # 63
Every document owned by Triffid, Inc., whether hardcopy or electronic, has a clear, 24-point word at the top and bottom. Only three words can be used: "Sensitive," "Proprietary" and "Public." This is an example of _____.
- A. Inverting
- B. Privacy
- C. Labeling
- D. Secrecy
Answer: C
NEW QUESTION # 64
Which of these is an example of a physical access control mechanism?
- A. A lock on a door
- B. Network switches that filter according to MAC addresses
- C. Software-based firewall at the perimeter of the network
- D. A process that requires two people to act at the same time to perform a function
Answer: A
NEW QUESTION # 65
Data retention periods apply to ____ data.
- A. Secret
- B. Medical
- C. Sensitive
- D. All
Answer: D
NEW QUESTION # 66
Kerpak works in the security office of a medium-sized entertainment company. Kerpak is asked to assess a particular threat, and he suggests that the best way to counter this threat would be to purchase and implement a particular security solution. This is an example of _______.
- A. Mitigation
- B. Transference
- C. Avoidance
- D. Acceptance
Answer: A
NEW QUESTION # 67
A means to allow remote users to have secure access to the internal IT environment.
- A. VPN
- B. VLAN
- C. Internet
- D. MAC
Answer: A
NEW QUESTION # 68
What is the access control model being implemented in Tekila's agency?
- A. Mandatory access control (MAC)
- B. Formal access control (FAC)
- C. Discretionary access control (DAC)
- D. Role-based access control (RBAC)
Answer: A
NEW QUESTION # 69
Prina is a database manager. Prina is allowed to add new users to the database, remove current users and create new usage functions for the users. Prina is not allowed to read the data in the fields of the database itself. This is an example of:
- A. Role-based access controls (RBAC)
- B. Alleviating threat access controls (ATAC)
- C. Mandatory access controls (MAC)
- D. Discretionary access controls (DAC)
Answer: A
NEW QUESTION # 70
In order for a biometric security to function properly, an authorized person's physiological data must be ______.
- A. Stored
- B. Deleted
- C. Broadcast
- D. Modified
Answer: A
NEW QUESTION # 71
The European Union (EU) law that grants legal protections to individual human privacy.
- A. The Privacy Human Rights Act
- B. The Magna Carta
- C. The General Data Protection Regulation
- D. The Constitution
Answer: C
NEW QUESTION # 72
In risk management concepts, a(n) _________ is something a security practitioner might need to protect.
- A. Threat
- B. Vulnerability
- C. Asset
- D. Likelihood
Answer: C
NEW QUESTION # 73
Cheryl is browsing the Web. Which of the following protocols is she probably using?
- A. TFTP (Trivial File Transfer Protocol)
- B. HTTP (Hypertext Transfer Protocol)
- C. FTP (File Transfer Protocol)
- D. SNMP (Simple Network Management Protocol)
Answer: B
NEW QUESTION # 74
Bruce is the branch manager of a bank. Bruce wants to determine which personnel at the branch can get access to systems, and under which conditions they can get access. Which access control methodology would allow Bruce to make this determination?
- A. Mandatory access control (MAC)
- B. Discretionary access control (DAC)
- C. Defense-in-depth
- D. Role-based access control (RBAC)
Answer: B
NEW QUESTION # 75
Barry wants to upload a series of files to a web-based storage service, so that people Barry has granted authorization can retrieve these files. Which of the following would be Barry's preferred communication protocol if he wanted this activity to be efficient and secure?
- A. SFTP (Secure File Transfer Protocol)
- B. SMTP (Simple Mail Transfer Protocol)
- C. FTP (File Transfer Protocol)
- D. SNMP (Simple Network Management Protocol)
Answer: A
NEW QUESTION # 76
......
CC Dumps Full Questions with Free PDF Questions to Pass: https://www.test4sure.com/CC-pass4sure-vce.html
CC PDF Recently Updated Questions Dumps to Improve Exam Score: https://drive.google.com/open?id=1bimdSpj9cV_fIgT0CoXTXWb_AD2kJbul