CCP CCP IT Governance, Risk & Compliance

Question 1

COBIT is best described as:

Accepted Answer

A framework for IT governance and management aligned with business objectives

Answer

A programming language for enterprise applications

Answer

A network security standard

Answer

A database normalization methodology

Question 2

Which risk management strategy involves transferring risk to a third party, such as an insurance provider?

Accepted Answer

Risk transfer

Answer

Risk avoidance

Answer

Risk mitigation

Answer

Risk acceptance

Question 3

The ITIL framework is primarily focused on:

Accepted Answer

IT service management best practices

Answer

Network infrastructure design

Answer

Software development lifecycle

Answer

Data warehouse architecture

Question 4

In risk assessment, the formula Risk = Threat × Vulnerability × Impact is used to:

Accepted Answer

Quantify the level of risk associated with an asset

Answer

Calculate the cost of implementing controls

Answer

Determine backup frequency requirements

Answer

Schedule penetration testing intervals

Question 5

What is the purpose of a Service Level Agreement (SLA)?

Accepted Answer

To formally define the expected level of service between a provider and customer

Answer

To document hardware specifications for procurement

Answer

To outline employee performance expectations

Answer

To describe software licensing terms

Question 6

Separation of duties (SoD) is an internal control that:

Accepted Answer

Requires multiple individuals to complete sensitive tasks to prevent fraud

Answer

Physically separates IT infrastructure across geographic zones

Answer

Divides network traffic across multiple switches

Answer

Segments user data by department