CCP CCP IT Governance, Risk & Compliance 2

Question 1

ISO/IEC 27001 is an international standard for:

Accepted Answer

Information security management systems (ISMS)

Answer

ISO/IEC 27001 specifies requirements for establishing, implementing, maintaining, and continually improving an information security management system.

Question 2

Which compliance regulation specifically protects the privacy of US patients' health information?

Accepted Answer

HIPAA

Answer

HIPAA (Health Insurance Portability and Accountability Act) establishes national standards for protecting sensitive patient health information in the US.

Question 3

A security audit trail is primarily used to:

Accepted Answer

Record user activities and system events for accountability and forensic review

Answer

Audit trails create a chronological record of system activities enabling detection of unauthorized actions and supporting incident investigation and compliance.

Question 4

The principle of least privilege means:

Accepted Answer

Users should be granted only the minimum access rights necessary to perform their job

Answer

The principle of least privilege limits user and system access rights to the bare minimum required for their role, reducing the attack surface.

Question 5

PCI DSS compliance is required for organizations that:

Accepted Answer

Store, process, or transmit payment card data

Answer

PCI DSS (Payment Card Industry Data Security Standard) applies to any entity that handles cardholder data to protect against payment fraud.

(CCP) Certified Computing Professional Practice Test

(CCP) Certified Computing Professional Practice Test

CCP CCP IT Governance, Risk & Compliance 2