ISC certification CC Exam Dumps

Zero Trust architectures rely on microsegmentation and continuous enforcement to limit lateral movement.

A Business Impact Analysis (BIA) identifies critical systems, dependencies, and acceptable downtime. It is foundational to both BCP and DRP development.

The primary goal of Identity and Access Management (IAM) is to ensuresecure and controlled accessto organizational resources. IAM systems manage user identities, authenticate users, and authorize access based on roles, policies, and least privilege principles.

IAM does not guarantee complete protection against all threats, as no system can provide 100% security. It also does not eliminate authentication or focus on network performance monitoring. Instead, IAM ensures that theright usershave theright accessto theright resourcesat theright time.

Core IAM capabilities include identity provisioning, authentication, authorization, access reviews, and auditing. IAM is foundational to zero trust architectures and is emphasized by NIST, ISO/IEC 27001, and CIS as a critical security control for preventing unauthorized access and reducing insider threat risk.

Business Continuity (BC) ensures thatcritical business operations continue during and after an incident. Business Continuity Planning focuses on people, processes, and alternative workflows to keep the organization functioning.

Disaster Recovery (DR) focuses specifically on restoring IT systems and infrastructure after a disruption, while Incident Response focuses on detecting and containing security incidents.

Because the question emphasizes maintaining business operations, Business Continuity is the most accurate answer.