Free Practice Questions for ISC CC Exam

A guard dog deters unauthorized access by increasing perceived risk. Deterrent controls discourage attacks before they occur.

During the detection and analysis phase, incidents are identified, triaged, categorized, and prioritized based on impact and urgency. This ensures resources are allocated appropriately.

A session key is a temporary cryptographic key used to encrypt communication between two systems for a single session. Session keys are typically symmetric keys generated during secure key exchange processes such as TLS handshakes.

They provide confidentiality and efficiency because symmetric encryption is much faster than asymmetric encryption. Once the session ends, the key is discarded, limiting exposure even if the key is later compromised.

Public keys are used for key exchange and authentication, not bulk data encryption. “Temporary key” and “section key” are not standard cryptographic terms.

Session keys are fundamental to secure network communications and are recommended by all modern cryptographic standards due to their performance and security benefits.

Microsegmentationdivides networks into granular zones protected by internal firewalls or policy enforcement points. It limits lateral movement and is a core Zero Trust principle.

AnOn-Path (Man-in-the-Middle)attack allows attackers to intercept, modify, or replay communications between two parties without their knowledge.

A MAC (Media Access Control) address is 48 bits long and is divided into two main parts. The first24 bitsrepresent theOrganizationally Unique Identifier (OUI), which is assigned by IEEE to hardware manufacturers.

The remaining 24 bits are assigned by the manufacturer to uniquely identify individual network interfaces. The OUI allows network administrators and tools to identify the vendor of a network device.

Understanding MAC addressing is important for network security, device identification, and troubleshooting. MAC addresses are commonly used in access control mechanisms such as MAC filtering, although they should not be relied upon as a strong security control due to spoofing risks.

Encryption ensures confidentiality by rendering data unreadable to unauthorized users, whether at rest or in transit.

A zero-day vulnerability is a security flaw that is unknown to the vendor and defenders at the time it is discovered or exploited. Because there is no patch available, organizations have “zero days” to fix it.

A disaster recovery team typically includes executive leadership, IT personnel, legal representatives, and public relations staff. These roles are critical for decision-making, technical recovery, and external communication.

A billing clerk is unlikely to be part of the disaster recovery team because the role does not typically contribute to recovery strategy, system restoration, or crisis communication.

Backups are recovery controls because they restore data and systems after failures, attacks, or disasters.