CC Certified in Cybersecurity (CC) Free Demo Questions – Try Before You Buy

Question 1

Which OSI layer is the primary target of a buffer overflow attack?

A

Layer 7

B

Layer 3

C

Layer 5

D

Layer 4

Correct Answer: A

Explanation:

Buffer overflow attacks target applications, exploiting improper memory handling. Applications operate atLayer 7 (Application Layer), making it the primary target.

Question 2

What is an IPSec replay attack?

A

An attack where an attacker modifies packets in transit

B

An attack where an attacker eavesdrops on network traffic

C

An attack where an attacker overloads a network with traffic

D

An attack where an attacker attempts to inject packets in an existing session

Correct Answer: D

Explanation:

An IPSec replay attack occurs when an attacker captures legitimate encrypted packets and attempts to retransmit (replay) them to gain unauthorized access or disrupt communication. The attacker does not need to decrypt the packets; instead, they rely on resending previously valid packets within an existing session.

Without proper protections, replayed packets could be accepted as valid, allowing attackers to impersonate legitimate users or repeat sensitive actions. IPSec defends against replay attacks usingsequence numbers and sliding windows, which ensure packets are processed only once and in the correct order.
Packet modification, eavesdropping, and traffic flooding are different attack types and are not specifically replay attacks. Replay attacks are particularly dangerous in authentication and session-based protocols, which is why anti-replay protection is a mandatory IPSec feature defined by the IETF.

Question 3

How often should an organization test its BCP?

A

Continually

B

Annually

C

Routinely

D

Daily

Correct Answer: C

Explanation:

Demo ISC2 CC Exam Questions

Which OSI layer is the primary target of a buffer overflow attack?

Layer 7

Layer 3

Layer 5

Layer 4

Correct Answer: A

Buffer overflow attacks target applications, exploiting improper memory handling. Applications operate atLayer 7 (Application Layer), making it the primary target.

What is an IPSec replay attack?

An attack where an attacker modifies packets in transit

An attack where an attacker eavesdrops on network traffic

An attack where an attacker overloads a network with traffic

An attack where an attacker attempts to inject packets in an existing session

Correct Answer: D

How often should an organization test its BCP?

Continually

Annually

Routinely

Daily

Correct Answer: C

BCPs should be testedroutinely(e.g., tabletop, simulations) to ensure readiness and relevance.

Demo Practice Mode