CAP Information Security, Confidentiality and Data Privacy

Question 1

You receive an email that appears to come from your CEO. It urgently asks you to buy gift cards and send the codes. What is the best response?

Accepted Answer

Confirm the request through a separate, known channel and report the email as possible phishing

Answer

Urgent requests for gift cards or money transfers are a classic business email compromise scam. Checking through a separate known channel, such as a phone call, and reporting the email to IT protects the organization. Replying only reaches the scammer.

Question 2

Which practice best protects confidential documents on a shared office printer?

Accepted Answer

Using secure or PIN-release printing and collecting printouts right away

Answer

Secure (PIN) release holds the job until the authorized person is standing at the printer, so sensitive pages don't sit in the tray where others can see them.

Question 3

What does the 'principle of least privilege' mean?

Accepted Answer

Giving users only the access they need to do their job

Answer

Least privilege limits each user's access to what their role requires. This reduces the damage from mistakes, insider misuse or a hacked account.

Question 4

What is the best way to dispose of paper records that contain employees' Social Security numbers?

Accepted Answer

Cross-cut shred them or use a certified secure destruction service

Answer

Personally identifiable information must be destroyed so it can't be reconstructed. Cross-cut shredding or a certified destruction vendor, with a certificate of destruction, meets that standard.

Question 5

Which password practice follows current security guidance?

Accepted Answer

Using long, unique passphrases with a password manager and multi-factor authentication

Answer

Long, unique passphrases stored in a password manager, combined with multi-factor authentication, give strong protection. Reusing, writing down or sharing passwords weakens security.

CAP - Certified Administrative Professional Practice Test

CAP - Certified Administrative Professional Practice Test

CAP Information Security, Confidentiality and Data Privacy