ISC Updated CC Exam Questions and Answers by oren

An exploit is the method or code used to take advantage of a known vulnerability. Successful exploitation may result in an intrusion or breach.

Most VPNs (e.g., IPSec) operate atLayer 3 (Network layer), encapsulating IP packets to create secure tunnels.

Data Loss Prevention (DLP) is designed to protect sensitive data across all states: at rest, in motion, and in use. DLP solutions monitor, detect, and prevent unauthorized access, sharing, or exfiltration of data.

While encryption protects data at rest and in transit, it does not prevent authorized users from misusing data. Hashing ensures integrity, not confidentiality. Threat modeling identifies risks but does not enforce protection.

DLP tools enforce policies, inspect content, and prevent data leakage through email, web uploads, removable media, and cloud services. They are especially valuable for protecting regulated data such as PII and financial records.

NIST and CIS recognize DLP as a critical control for comprehensive data protection strategies.

Cloud orchestration coordinates automated tasks, workflows, and resource provisioning across cloud environments to improve efficiency and consistency.