ISC2 CC Exam Practice 65 Questions with Complete
Solutions.
Which access control is more effective at protecting a door against unauthorized access?
A. Fences
B. Turnstiles
C. Barriers
D. Locks - Correct Answer D. Locks
Which type of attack primarily aims to make a resource inaccessible to its intended
users?
A. Phishing
B. Denial of Service
C. Trojans
D. Cross-Site Scripting - Correct Answer B. Denial of Service
Which devices have the primary objective of collecting and analyzing security events?
A. Firewall
B. Hubs
C. Routers
D. SIEM - Correct Answer D. SIEM
Which access control model specifies access to an object based on the subject's role in
the organization?
A. RBAC
B. MAC
C. ABAC
D. DAC - Correct Answer A. RBAC
,When a company hires an insurance company to mitigate risk, which risk management
technique is being applied?
A. Risk transfer
B. Risk avoidance
C. Risk mitigation
D. Risk tolerance - Correct Answer A. Risk transfer
Which type of attack will most effectively provide privileged access (root access in
Unix/Linux platfoms) to a computer while hiding its presence?
A. Rootkits
B. Phishing
C. Cross-Site Scripting
D. Trojans - Correct Answer A. Rootkits
Which device is used to connect a LAN to the Internet?
A. Routers
B. Firewalls
C. HIDS
D. SIEM - Correct Answer A. Router
How many data labels are considered manageable?
A. 1-2
B. 1
C. 2-3
D. > 4 - Correct Answer C. 2-3
In Change Management, which component addresses the procedures needed to undo
changes?
, A. Request for Approval
B. Rollback
C. Request for Change
D. Disaster and Recover - Correct Answer B. Rollback
Which of the following is an example of 2FA?
A. One-Time password (OTA)
B. Keys
C. Badges
D. Passwords - Correct Answer A. One-Time passwords (OTA)
Which cloud development model is suited to companies with similar needs and
concerns?
A. Community cloud
B. Private cloud
C. Multi-tenant
D. Hybrid cloud - Correct Answer A. Community cloud
Which of these would be the best option if a network administrator needs to control
access to a network?
A. HIDS
B. IDS
C. SIEM
D. NAC - Correct Answer D. NAC
In order to find out whether personal tablet devices are allowed in the office, which of the
following policies would be helpful to read?
A. Change Management Policy
Solutions.
Which access control is more effective at protecting a door against unauthorized access?
A. Fences
B. Turnstiles
C. Barriers
D. Locks - Correct Answer D. Locks
Which type of attack primarily aims to make a resource inaccessible to its intended
users?
A. Phishing
B. Denial of Service
C. Trojans
D. Cross-Site Scripting - Correct Answer B. Denial of Service
Which devices have the primary objective of collecting and analyzing security events?
A. Firewall
B. Hubs
C. Routers
D. SIEM - Correct Answer D. SIEM
Which access control model specifies access to an object based on the subject's role in
the organization?
A. RBAC
B. MAC
C. ABAC
D. DAC - Correct Answer A. RBAC
,When a company hires an insurance company to mitigate risk, which risk management
technique is being applied?
A. Risk transfer
B. Risk avoidance
C. Risk mitigation
D. Risk tolerance - Correct Answer A. Risk transfer
Which type of attack will most effectively provide privileged access (root access in
Unix/Linux platfoms) to a computer while hiding its presence?
A. Rootkits
B. Phishing
C. Cross-Site Scripting
D. Trojans - Correct Answer A. Rootkits
Which device is used to connect a LAN to the Internet?
A. Routers
B. Firewalls
C. HIDS
D. SIEM - Correct Answer A. Router
How many data labels are considered manageable?
A. 1-2
B. 1
C. 2-3
D. > 4 - Correct Answer C. 2-3
In Change Management, which component addresses the procedures needed to undo
changes?
, A. Request for Approval
B. Rollback
C. Request for Change
D. Disaster and Recover - Correct Answer B. Rollback
Which of the following is an example of 2FA?
A. One-Time password (OTA)
B. Keys
C. Badges
D. Passwords - Correct Answer A. One-Time passwords (OTA)
Which cloud development model is suited to companies with similar needs and
concerns?
A. Community cloud
B. Private cloud
C. Multi-tenant
D. Hybrid cloud - Correct Answer A. Community cloud
Which of these would be the best option if a network administrator needs to control
access to a network?
A. HIDS
B. IDS
C. SIEM
D. NAC - Correct Answer D. NAC
In order to find out whether personal tablet devices are allowed in the office, which of the
following policies would be helpful to read?
A. Change Management Policy
