Summer Special 60% Discount Offer - Ends in 0d 00h 00m 00s - Coupon code: bestdeal

Free ISC CC Practice Exam with Questions & Answers | Set: 12

Questions 111

Which type of software testing focuses on examining the source code for vulnerabilities and security issues?

Options:
A.

Black-box testing

B.

White-box testing

C.

Functional testing

D.

User acceptance testing

ISC CC Premium Access
Questions 112

Which type of attack takes advantage of vulnerabilities in validation?

Options:
A.

ARP spoofing

B.

Pharming attacks

C.

Cross-site scripting (XSS)

D.

DNS poisoning

Questions 113

Is the right of an individual to control the distribution of information about themselves

Options:
A.

Confidentiality

B.

Integrity

C.

Privacy

D.

Availability

Questions 114

John joined the ISC2 Organizations, his manager asked to check the authentications in security module. What would John use to ensure a certain control is working as he want and expect it to?

Options:
A.

Security Testing

B.

Security assessment

C.

Security audit

D.

Security walkthrough

Questions 115

6 Which access control method uses attributes and rules to define access policies that are evaluate by a central Policy Decision Point (PDP)

Options:
A.

DAC

B.

RBAC

C.

MAC

D.

ABAC

Questions 116

A company performs an analysis of its information systems requirements functions and interdependences in order to prioritize contingency requirement. What is this process called?

Options:
A.

BCP

B.

DRP

C.

IRP

D.

BIA

Questions 117

What is the first phase in System Development Life Cycle

Options:
A.

Requirements Analysis Phase

B.

Feasibilty Study

C.

Design Phase

D.

Development Phase

Questions 118

Which of the following is a characteristic of cloud

Options:
A.

Broad Network Access

B.

Rapid Elasticity

C.

Measured Service

D.

AII

Questions 119

Exhibit.

CC Question 119

What is the purpose of a Security Information and Event Management (SIEM) system?

Options:
A.

Encrypting files

B.

Monitoring and analyzing security events -

C.

Blocking malicious websites

D.

Managing user passwords

Questions 120

Which of the following is not a source of redundant power

Options:
A.

Generator

B.

Utility

C.

UPS

D.

HVAC

ISC Free Exams

ISC Free Exams
Examstrack provides free ISC exam prep materials and practice tests to support your ISC certification goals.