[Q108-Q127] Use the best ways of preparing for CC Exam Dumps with PremiumVCEDump ISC CC PDF Dumps [2026]

20 May, 2026 By admin CC, ISC 0 Comments

[Q108-Q127] Use the best ways of preparing for CC Exam Dumps with PremiumVCEDump ISC CC PDF Dumps [2026]

Rate this post

Use the best ways of preparing for CC Exam Dumps with PremiumVCEDump ISC CC dump PDF [2026]

ISC CC exam candidates will surely pass the Exam if they consider the CC dumps learning material presented by PremiumVCEDump.

QUESTION 108
A________creates an encrypted tunnel to protect your personal data and communications

HTTPS

VPN

Anti-virus

IDS

QUESTION 109
Events with negative consequences such as crashes, floods, defacement, or malicious code execution are called:

Breach

Incident

Adverse event

Exploit

Anadverse eventis a harmful occurrence that may or may not constitute a security incident or breach.

QUESTION 110
A company wants employees to access resources from anywhere in the world. Which access control model is best?

DAC

RBAC

MAC

ABAC

ABAC supports dynamic, context-aware access decisions based on attributes such as location, device, and time-ideal for global access scenarios.

QUESTION 111
A set of rules that everyone must comply with and that usually carry monetary penalties for noncompliance are:

Standards

Policies

Procedures

Laws or regulations

Laws and regulations are legally enforceable and can impose fines or penalties. Standards and policies are not legally binding unless mandated by regulation.

QUESTION 112
Exhibit.

What is the PRIMARY purpose of a web application firewall (WAF)?

To protect the web server from DDoS attacks

To monitor network traffic for intrusions

To filter and block malicious web traffic and requests

To manage SSL certificates

QUESTION 113
Siobhan is an (ISC)² member who works for Triffid Corporation as a security analyst. Yesterday, Siobhan got a parking ticket while shopping after work. What should Siobhan do?

Inform (ISC)2

Pay the parking ticket

Inform supervisors at Triffid

Resign employment from Triffid

QUESTION 114
Which of the following is not a Social engineering technique

Pretexting

Baiting

Quid pro quo

Double Dealing

QUESTION 115
Example of Dynamic authorization

DAC

RBAC

MAC

ABAC

QUESTION 116
Which of these components is very likely to be instrumental to any disaster recovery (DR) effort?

Routers

Laptops

Firewalls

Backups

Backups are one of the most critical components of any disaster recovery (DR) strategy. Disaster recovery focuses on restoring systems, data, and operations after a disruptive event such as a cyberattack, natural disaster, hardware failure, or human error. Without reliable backups, recovery may be impossible or severely delayed.
Backups ensure that critical data can be restored to a known good state, minimizing data loss and downtime.
Industry frameworks such as NIST SP 800-34 and ISO/IEC 27031 emphasize backups as a foundational DR control. They support recovery time objectives (RTOs) and recovery point objectives (RPOs), which define how quickly systems must be restored and how much data loss isacceptable.
While routers, laptops, and firewalls are important infrastructure components, they can typically be replaced or reconfigured. Lost or corrupted data, however, may be irreplaceable without backups. Best practices include maintaining regular, automated backups, storing them offsite or in the cloud, and protecting them from ransomware using immutable or offline storage. Testing backups regularly is also essential to ensure they are usable during an actual disaster.

QUESTION 117
Which document identifies the principles and rules governing an organization’s protection of information systems and data?

Procedure

Guideline

Policy

Standard

Security policies are high-level, mandatory statements approved by management that define security objectives, principles, and rules. Procedures and standards support policies but do not establish overarching intent.

QUESTION 118
Which of the following documents contains elements that are NOT mandatory

Procedures

Policies

Regulations

Guidelines

QUESTION 119
How many bits represent the organization unique identifier (oui) in mac addresses?

16 Bits

48 Bits

24 Bits

32 Bits

QUESTION 120
______ is used to ensure that configuration management activities are effective and enforced.

Inventory

Baseline

Identification

Verification and audit

QUESTION 121
Governments can impose financial penalties as a consequence of breaking a:

Standard

Regulation

Policy

Procedure

Regulations are legally enforceable requirements issued by governments or regulatory bodies. Violating regulations such as GDPR, HIPAA, or PCI DSS can result in fines and penalties.
Standards, policies, and procedures may influence compliance but do not carry direct legal penalties unless codified into law.

QUESTION 122
The method of distributing network traffic equally across a pool of resources that support an application

Vlan

DNS

VPN

Load Balancing

QUESTION 123
An organization must always be prepared to ______ when applying a patch.

Pay for the updated content

Buy a new system

Settle lawsuits

Rollback

QUESTION 124
Which prevents threats?

Antivirus

IDS

SIEM

HIDS

Antivirus softwareis apreventive security controldesigned to stop known malware threats before they can execute or spread within a system. Antivirus solutions use signature-based detection, heuristic analysis, and increasingly behavior-based techniques to block malicious code such as viruses, worms, trojans, and ransomware.
In contrast,IDS (Intrusion Detection Systems)andHIDS (Host-based IDS)are primarilydetective controls.
They monitor systems and networks for suspicious activity but do not inherently block threats.SIEMplatforms aggregate and analyze logs for visibility and correlation; they support detection and response but do not directly prevent threats.
According to NIST SP 800-53, preventive controls are designed to stop incidents from occurring, while detective controls identify events after or during occurrence. Therefore, antivirus is the correct choice as it directly prevents threats.

QUESTION 125
A device that routes traffic to the port of a known device

Switch

Hub

Router

Ethernet

QUESTION 126
Ignoring a risk and continuing business operations is known as:

Risk acceptance

Risk mitigation

Risk avoidance

Risk transfer

Risk acceptance acknowledges the risk and chooses to proceed without additional controls, often due to cost or low impact.

QUESTION 127
Hoshi is an (ISC)² member who works for the Triffid Corporation as a data manager. Triffid needs a new firewall solution, and Hoshi is asked to recommend a product for Triffid to acquire and implement. Hoshi’s cousin works for a firewall vendor; that vendor happens to make the best firewall available. What should Hoshi do?

Recommend a different vendor/product

Recommend the cousin’s product

Hoshi should ask to be recused from the task

Disclose the relationship, but recommend the vendor/product

Loading …