CC Pre-Exam Practice Tests (Updated 406 Questions) [Q79-Q101]

Rate this post

CC Pre-Exam Practice Tests | (Updated 406 Questions)

Valid CC Exam Q&A PDF – One Year Free Update

NO.79 A Company wants to ensure that its employees can access the network resources from anywhere in the world which access control model is best suited for this scenario

DAC

RBAC

MAC

ABAC

NO.80 Which of the following will have the most impact on determining the duration of log retention?

Personnel preference

Applicable laws

Industry standards

Types of storage media

NO.81 An outward-facing IP address used to access the Internet.

Global Address

Private Address

Public Address

DNS

NO.82 A Company critical functions were disrupted due to a system outage. What plan should theorganization have in place to sustain these operations during and after a significant disruptions?

DRP

BCP

IRP

ALL

NO.83 A company primary data center goes down due to a hardware failure causing a major disruption to the IT and communications systems. What is the focus of disaster recovery planning in this scenario

Maintaining critical business functions during the disruption

Fixing the hardware failure

Restoring IT and communications back to full operations after the disruptions

Guiding the actions of emergency response personnel during the disruption

NO.84 What is the recommended temperature range for optimal data center uptime?

62°F-69°F

64°F-81°F

82°F-90°F

91°F-100°F

ASHRAE recommends64°F-81°Ffor modern data centers to balance hardware longevity and energy efficiency.

NO.85 Which of the following is NOT one of the three main components of a sql database?

Views

Schemas

Tables

Object-oriented interfaces

NO.86 Who is responsible for publishing and signing the organization s policies?

The security office

Human resources

Senior management

The legal department

NO.87 Which version of TLS is considered the most secure and recommended for use?

TLS 1.0

TLS 1.1

TLS 1.2

TLS 1.3

TLS 1.3 is the most secure and currently recommended version of the Transport Layer Security protocol. It removes outdated cryptographic algorithms, simplifies the handshake process, and provides stronger security guarantees than earlier versions.
TLS 1.3 eliminates insecure features such as static RSA key exchange and weak cipher suites. It enforces forward secrecy by default and significantly reduces handshake latency, improving both security and performance.
TLS 1.0 and TLS 1.1 are deprecated due to known vulnerabilities. TLS 1.2 is still secure when properly configured but is being phased out in favor of TLS 1.3.
Security frameworks and regulatory standards strongly recommend TLS 1.3 for protecting sensitive data in transit, especially for public-facing services.

NO.88 The internet standards organization, made up of network designers, operators, vendors and researchers, that defines protocol standards

ISO

NIST

IETF

GDPR

NO.89 Which access control method uses attributes and rules evaluated by a central Policy Decision Point (PDP)?

DAC

RBAC

MAC

ABAC

ABAC uses centralized policy engines (PDPs) to evaluate attributes and enforce fine-grained access control decisions dynamically.

NO.90 Which of the following cloud service models provides the most suitable environment for customers to build and operate their own software?

SaaS

laaS

PaaS

NO.91 What is the focus of disaster recovery planning after a data center failure?

Maintain business functions

Fix hardware

Restore IT and communications

Guide emergency responders

DRP focuses on restoring IT infrastructure, applications, and communications to operational status.

NO.92 255.255.255.0 Address represents

Broadcast

Unicast

Subnet mask

Global Address

NO.93 What is the first component the new security engineer should learn about in the incident response plan?

Detection and analysis

Preparation

Containment

Eradication

NO.94 Which attack most effectively maintains remote access and control over a victim’s computer?

Phishing

Trojans

XSS

Rootkits

Rootkits provide stealthy, persistent control by hiding malicious processes and maintaining privileged access.
They are extremely difficult to detect and remove.

NO.95 Which document provides a high-level overview of a Disaster Recovery Plan?

Technical guides

Department-specific plans

Full plan copies for team members

Executive summary

Anexecutive summarygives leadership a concise overview of objectives, scope, and recovery strategies without technical detail.

NO.96 XenServer, LVM, Hyper-V, and ESXi are:

Type 2 hypervisors

Type 1 hypervisors

Both

None

These areType 1 (bare-metal) hypervisors, running directly on hardware without a host operating system, offering higher performance and security.

NO.97 A portion of the network exposed to the outside world with additional controls is called:

VPN

VLAN

Zero Trust

DMZ

A Demilitarized Zone (DMZ) hosts public-facing services while isolating internal networks. It adds layered security controls to reduce attack impact.

NO.98 Which of the following is NOT a protocol of OSI Layer 3?

IGMP

ICMP

SSH

SSH operates at the Application layer (Layer 7). IP, ICMP, and IGMP are Layer 3 protocols responsible for routing and control messaging.

NO.99 A collection of actions that must be followed to complete a task or process in accordance with a set of rules is known as:

Policy

Procedure

Law

Standard

Aprocedureis a detailed, step-by-step set of instructions that explainshowto perform a task in compliance with policies and standards. Procedures translate high-level requirements into actionable guidance for staff.
Policies define what must be done, standards specify mandatory requirements, and procedures explain exactly how to carry them out. Laws are external legal mandates, not internal operational documents.
For example, a security policy may require access reviews, a standard may define review frequency, and a procedure will outline the exact steps to conduct the review. Procedures ensure consistency, reduce errors, and support compliance and auditing efforts.

NO.100 Organization experiences a security event that does not affect the confidentiality integrity and availability of its information system. What term BEST describes this situation?

Exploit

Breach

Incident

Event

NO.101 Which of the following is not a protocol of the OSI layer 3

IGMP

ICMP

SSH

Loading …

Certified in Cybersecurity (CC) Free Update Certification Sample Questions: https://www.prepawaytest.com/ISC/CC-practice-exam-dumps.html

Leave a Reply Cancel reply