ISC2 CC Domain 3 : Access Control Concepts

[@kanhangad_toppers9868]

Question 5. linda works for a large organization that has multiple systems and applications. the organizatin decides to implement an integrated identity and access management system. what would be the main purpose of this system ? a. to prevent unauthorized access to organizational assets. b. to restrict access to buildings, but not data or systems. c. to manage business continuity and disaster recovery plans. d. to govern incident response plans. Correct answer : a. to prevent unauthorized access to organizational assets. An integrated IAM system helps ensure that only authorized individuals have access to the appropriate resources, systems, and data within the organization. It helps manage user identities, roles, and permissions, thus preventing unauthorized access and enhancing security across the organization's digital assets.

[@prateekmittal6240]

You're right. The response should be 'A'.

[@charleseze5631]

I had my exam this afternoon and passed. Thanks for these useful resources. They really helped.

[@__999_what_is_your_emergency]

does these course helped you?

[@medjay69]

@@__999_what_is_your_emergency You should never doubt that it will definitely help to practice answering the questions of any exam dump. Good luck!

[@dolapoarinola7251]

@@__999_what_is_your_emergencythat’s what he said

[@ruvarashechipungu4499]

Thank you cybernauts I managed to clear my CC exam through your videos👏

[@jamaaltekena5670]

Your resources were very helpful. I passed my CC exam

[@bhartsonia]

My exam is on Monday and I'm going through your videos as a final prep. Wish me Luck.

[@medjay69]

I hope you nailed it!

[@ubi-wan-kenobi]

How did it go

[@muhammadyounas6437]

Thanks ! I have passed my CC exam today

[@PrashantKumar-vl6mj]

What is the question bank you will suggest?

[@muhammadyounas6437]

​@@PrashantKumar-vl6mj I suggest you firstly complete your official self placed training then If you have confusion in some topics then move on you tube tutorial to clear your concept.Every thing in the official training course is important regarding exam pint of view. First of all clear your concept from course then Practices MCQs type in maximum time .

[@PrashantKumar-vl6mj]

@@muhammadyounas6437 ok thanks man

[@nawazsherif4276]

@@muhammadyounas6437 is the questions will be same like mock test or different

[@muhammadyounas6437]

@@nawazsherif4276 basically Question Of any Domain's topic clear your concept regarding exam point of view but not same you face in exam .If you clear your concept then you can easily pass the exam .

[@seanrivers4667]

Q27 @22:19 which of the following physical controls is used to protect against eavesdropping and data theft through electromagnetic radiation a. Screening rooms b. EMI shielding c. White noise generators d. None of the above She sounds out option d. None of the above and selects d.) EMI shielding which is the correct answer

[@gujit]

Question 31: how does a camera protect a parking lot from theft and vandalism? its a deterrent, not protection. surely the answer should be perimeter fencing or even security guards?

[@prashantdhewaju9575]

correct. should be Perimeter fencing

[@gujit]

@@prashantdhewaju9575 my exam is tomorrow. Wish me luck

[@henrysantos942]

I thought the same.

[@jevan927]

​@@gujitdid you pass

[@gujit]

@@jevan927 yes

[@itunuakinola2357]

My exam is today, I hope I pass.

[@nyg155]

You will

[@jevan927]

Did you pass

[@maurice2014]

Well, what happened?

[@ayokumolu7345]

I pray you did

[@nawazsherif4276]

Q5 . ans is A but the green mark is showing B Q26. didn't mentioned what type of disaster and Flood barrier can't be help full. Q33. Corrective control should be placed before attack. Recovery control is best after the attack occurs to restore the system.

[@a_official_ldn]

The question is asking for a PHYSICAL control and the only physical control in that list is the flood barriers. The work like bollards as an example. Fences, gates, bollards, barriers, door locks, security guards etc.. are all physical controls

[@NanaAkuaSerwaa-y5u]

@@a_official_ldn the question did not state that it was a physical control. the correct answer is recovery

[@u2murugesh127]

In question 5, Answer is correctly mentioned as A but in the visual it shows B.

[@M_A_JI_bI_III]

and the question 24 has wrong answer.

[@venkateshvenky2963]

Q5 selected B but right answer stated is A

[@samcruiz]

True story

[@mediacmid]

I Noted that ‏‪3:53‬‏

[@vifferent]

Corrective controls (measures to reduce the likelihood of a recurrence of a given breach) & Recovery controls (measures to restore systems to normal operation)

[@s.wallace3616]

this is a great way to help study for the cc test but some questions are showing and saying different answers. meaning the commentator would say one thing and the video would show another, when giving the answer.

[@Sadeeqqq_]

Passed my exams today, thank you

[@ABC61209]

do you have the PDF for all these questions

[@yjzhou1]

quick question - for Q42 - that wasn't even in the course content right? Never heard of ABAC before

[@adityamehta2819]

Dont just study from ISC website or you will be suprised on exam day

[@henrysantos942]

What other study resources do you recommend?

[@ybentertainment5118]

At 28:00 you have two of the same answers listed

[@onurhanyalcn6524]

Q24 why the best solition is not biometric locks?

[@ahmedagamaliyev1798]

i also thought in that way

[@onurhanyalcn6524]

@@ahmedagamaliyev1798 i have failed with this questions.

[@ubi-wan-kenobi]

@@onurhanyalcn6524 What do you mean?

[@jmcybersecurity]

I believe it is because biometric locks are not physical controls,

[@abdulrahmananka5798]

There are a lot of mistake in this video such as when you say the anser the rectangle flag pointer to wrong answer and also some choice answer are duplicate as question 35. Could you please review this video ?

[@alexsackeyfio7581]

most of your question and answers are debatable

[@ramiazzam5167]

many errors need to correct please ! Thanks for your efforts .

[@indrajitbanerjee7046]

I dont agree to the last question (60) I think it should be none of the above

[@sabeshhardy]

Agree

[@muhammadhozefa7285]

while username and password authentication is a component of defense in depth, it should not be the SOLE or primary layer of security. A comprehensive approach should involve multiple layers and security measures to provide robust protection against a wide range of threats. I also think it should be none of the above

[@jovannygalvez8191]

Q35 has logical control mentioned twice

[@seanrivers4667]

Q36 @28:43 Has two exact answers making it the obvious of the four so technically both a. and d. are correct.

[@mohamedtawfig4484]

But the best one is A

[@SantoshKundapura]

question 5. the highlighter marking the answer is different from what is been told.

[@ifepopson]

Hi, did you write the real exam online or you had to goto a testing centre?

[@TearTheBook]

go to a testing centre

[@rul4s]

Question 17 - non of above A) Single Factor authentication B) Single Factor C) Access Control D Policy Right answer is A+B

[@musicwaves2108]

Once review the qstn 36

[@HacktivityHub]

Q. 38 question answer is wrong I had checked on ChatGPT, this is showing Administrative Control

[@sabeshhardy]

Answer should be RABC control

[@ishtiyaqhussain8233]

Thanks passed my CC exam kindly upload other 2 Domains for new learners....

[@ishtiyaqhussain8233]

@limitlesskids5096 out of 100 questions 20 were complex to answers others easy if you remember topics and remember important port numbers

[@eldar_edu]

@@ishtiyaqhussain8233 so network security domain video is enough to asnwer all network related question during exam? i have completed isc2 course already but feel unadequate

[@Darshan_Goswami]

Please upload all modules 😢 I've an exam on Tuesday.

[@ishtiyaqhussain8233]

Me too on Thursday

[@nawazsherif4276]

ME too on tuesday

[@mohamedtawfig4484]

How is it tel us please and give us some advicement

[@jamaaltekena5670]

My exam is today.. wish me luck😊

[@jevan927]

Did you pass

[@jamaaltekena5670]

@@jevan927 yes i did

[@jevan927]

@@jamaaltekena5670 congratulations🎉. Is there anything you think I can add to study. I have mine really soon

[@danielegbo7381]

Qst 60: username and password is not just enough to be called a type of defense in depth..

[@danielegbo7381]

While usernames and passwords are essential components of a security system, relying solely on them may not be sufficient to achieve a true "defense in depth" strategy. Defense in depth is a security approach that involves layering multiple security measures throughout an information system to provide redundancy and enhance protection.

[@FatFreddysKat]

BEWARE! This video has multiple incorrect and irrelevant information

[@maurice2014]

Did you pass tho?

[@crisptophersclub684]

This video has many errors. I am not sure if the comments about "your resources were very helpful. I passed my CC exam" is an actual comment or a bot. But so many errors make me not want to watch this video tbh.

[@kanhangad_toppers9868]

Question 27. which of the following physical controls is used to protect against eavesdropping and data theft through electromagnetic radiation a. Screening rooms b. EMI shielding c. White noise generators d. None of the above The correct answer is: b. EMI shielding EMI stands for Electromagnetic Interference. EMI shielding involves using materials that can block or reduce the electromagnetic radiation emitted by electronic devices. This type of shielding helps protect against eavesdropping and data theft through electromagnetic radiation, as it prevents the leakage of electromagnetic signals that could potentially be intercepted and exploited by malicious actors.

[@a_official_ldn]

For question 28 I don’t think a metal detector is the correct answer, as the question is asking for a physical control to prevent unauthorised electronic devices into the workplace and I doubt a metal detector will be as effective when detecting small electronic devices. Hence why I think security guards is the correct answer.

[@ishtiyaqhussain8233]

This is tricky question even in exam...dont know what we need to select.

[@gujit]

im on question 28 too and yeah i think youre right too. that means some devices are authorised so a guard needs to check your authorisation against ACL

[@a_official_ldn]

When will you release part 4?