CC Exam Dumps - CC - Certified in Cybersecurity

Operating system logs are the most relevant source of information for detecting and investigating privilege escalation attacks. These logs record authentication events, privilege changes, process executions, and system-level actions.

Because the attacker already had authorized access, firewall and IDS logs may show little or no suspicious activity. Database logs focus on database-level operations, not OS privilege changes.

OS logs provide the best visibility into actions such as sudo usage, kernel exploits, and unauthorized permission changes. They are essential for forensic analysis and incident response involving insider threats.

Two-Person Integrityensures no single individual can complete a sensitive action alone, reducing fraud and insider threats.

Internet of Things (IoT)devices include embedded systems such as sensors, smart appliances, cameras, and industrial controllers that connect to networks and exchange data. These devices often have limited security controls and are common attack targets, making them a significant cybersecurity concern.

VLAN hopping exploits weaknesses in Layer 2 switching mechanisms such as trunking and tagging.

DRP focuses on restoring IT infrastructure, applications, and communications to operational status.

Potential conflicts of interest must be evaluated against the organization’s internal code of ethics. While professional codes (like ISC2) are important, employment-related decisions are governed primarily by organizational ethics and HR policies.

A cryptographic hash uniquely represents the contents of a file or message. Even a small change produces a completely different hash value, making it an effective digital fingerprint.

Multitenancy allows shared infrastructure while maintaining logical isolation between customers.