CCP CCP IT Governance, Risk & Compliance

Question 1

COBIT is best described as:

Accepted Answer

A framework for IT governance and management aligned with business objectives

Answer

COBIT (Control Objectives for Information and Related Technologies) is an IT governance framework that helps organizations align IT strategy with business goals.

Question 2

Which risk management strategy involves transferring risk to a third party, such as an insurance provider?

Accepted Answer

Risk transfer

Answer

Risk transfer shifts the financial impact of a risk to another party, typically through insurance or outsourcing, without eliminating the underlying risk.

Question 3

The ITIL framework is primarily focused on:

Accepted Answer

IT service management best practices

Answer

ITIL (Information Technology Infrastructure Library) provides a set of best practices for delivering and managing IT services aligned with business needs.

Question 4

In risk assessment, the formula Risk = Threat × Vulnerability × Impact is used to:

Accepted Answer

Quantify the level of risk associated with an asset

Answer

This formula combines the likelihood of a threat exploiting a vulnerability with the resulting business impact to produce a risk score for prioritization.

Question 5

What is the purpose of a Service Level Agreement (SLA)?

Accepted Answer

To formally define the expected level of service between a provider and customer

Answer

An SLA is a contract that specifies measurable service standards such as uptime, response times, and support quality that a provider must meet.

(CCP) Certified Computing Professional Practice Test

(CCP) Certified Computing Professional Practice Test

CCP CCP IT Governance, Risk & Compliance