Certified Computing Professional (CCP) — Questions and Answers

Question 1: What type of error occurs at runtime when a program attempts to access memory it is not authorized to use?

Compilation error
Segmentation fault (Correct answer)
Logic error
Syntax error

Correct answer: Segmentation fault

A segmentation fault is a runtime error raised when a program tries to access a memory location it is not permitted to access.

Question 2: Which concept describes the practice of splitting a single large table into smaller tables based on column groups to improve I/O performance?

Table federation
Vertical partitioning (Correct answer)
Data archiving
Horizontal partitioning

Correct answer: Vertical partitioning

Vertical partitioning splits a table by columns, keeping frequently accessed columns in one table and rarely accessed columns in another to reduce I/O per query.

Question 3: Which quality assurance method is most commonly applied in iaas, paas & saas models to verify that CCP professional standards are being met?

Relying on client satisfaction surveys as the sole measure of quality
Structured audits, peer reviews, and performance metrics aligned with industry benchmarks (Correct answer)
Annual reviews conducted exclusively by non-technical management
Informal self-assessment without external validation

Correct answer: Structured audits, peer reviews, and performance metrics aligned with industry benchmarks

Structured audits, peer reviews, and performance metrics aligned with industry benchmarks are the most effective quality assurance methods in iaas, paas & saas models, providing objective, measurable evidence that CCP standards are consistently met.

Question 4: Which Redis data structure is most appropriate for implementing a leaderboard with ranked scores?

List
Sorted Set (Correct answer)
String
Hash

Correct answer: Sorted Set

Redis Sorted Sets store members with associated floating-point scores and automatically maintain ranking order, making them ideal for leaderboards.

Question 5: What is the worst-case time complexity of insertion into a hash table that uses open addressing?

O(n²)
O(n) (Correct answer)
O(log n)
O(1)

Correct answer: O(n)

In the worst case (e.g., all keys hash to the same slot), open addressing degrades to O(n) as every slot must be probed.

Question 6: In a pipelined CPU, what causes a 'structural hazard'?

An instruction depending on the result of a previous unfinished instruction
Two instructions requiring the same hardware resource at the same time (Correct answer)
A cache miss that stalls the entire pipeline
A branch instruction causing uncertainty about the next instruction to fetch

Correct answer: Two instructions requiring the same hardware resource at the same time

A structural hazard occurs when two or more instructions need the same physical hardware resource (like a single memory port or ALU) simultaneously, preventing their concurrent execution.

Question 7: What is normalization in databases?

Deleting unnecessary records.
Encrypting database tables.
Combining all data into a single table.
Organizing data to minimize redundancy (Correct answer)

Correct answer: Organizing data to minimize redundancy

Normalization in databases is the process of organizing data to minimize redundancy and improve data integrity. It involves structuring tables and columns according to a series of normal forms, which helps eliminate duplicate data and reduce anomalies during data insertion, update, or deletion. This optimization ensures data consistency and efficient storage.

Question 8: Which property of relational databases ensures that a committed transaction remains persistent even after a system failure?

Durability (Correct answer)
Atomicity
Isolation
Consistency

Correct answer: Durability

Durability, the 'D' in ACID, guarantees that once a transaction is committed, its effects are permanently recorded even in the event of a crash.

Question 9: What is denormalization in database design?

Splitting tables to remove redundancy
Intentionally introducing redundancy to improve read performance (Correct answer)
Converting a relational schema to NoSQL format
Removing all foreign key constraints

Correct answer: Intentionally introducing redundancy to improve read performance

Denormalization deliberately adds redundant data or groups data to reduce costly joins and improve query read performance at the cost of increased storage and update complexity.

Question 10: What is the average-case time complexity for searching in a balanced binary search tree (BST)?

O(n log n)
O(log n) (Correct answer)
O(1)
O(n)

Correct answer: O(log n)

A balanced BST halves the search space at each level, yielding O(log n) average-case search time.

Question 11: What cryptographic concept ensures that a sender cannot later deny having sent a message?

Confidentiality
Availability
Integrity
Non-repudiation (Correct answer)

Correct answer: Non-repudiation

Non-repudiation, typically achieved through digital signatures, prevents a sender from denying authorship of a message they signed.

Question 12: Which property of a binary heap ensures the parent node's key is always greater than or equal to its children's keys?

Min-heap property
BST property
Balanced property
Max-heap property (Correct answer)

Correct answer: Max-heap property

The max-heap property states that every parent node has a key ≥ its children, placing the maximum at the root.

Question 13: When documenting activities related to sdlc & agile development, which practice is considered essential for CCP certification holders?

Keeping documentation in personal notes that are not accessible to other team members
Completing documentation only when requested by auditors or supervisors
Maintaining comprehensive records that include procedures, observations, results, and any anomalies (Correct answer)
Recording only outcomes while omitting the methods and processes used

Correct answer: Maintaining comprehensive records that include procedures, observations, results, and any anomalies

Comprehensive documentation that includes procedures, observations, results, and any anomalies is essential in sdlc & agile development. This supports quality assurance, enables peer review, and satisfies regulatory and audit requirements.

Question 14: What type of cable is required to directly connect two computers without a switch?

Crossover cable (Correct answer)
Straight-through cable
Rollover cable
Coaxial cable

Correct answer: Crossover cable

A crossover cable swaps transmit and receive pairs, allowing two similar devices to communicate directly.

Question 15: Which metric measures the average time a system operates before experiencing a failure?

RTO (Recovery Time Objective)
MTBF (Mean Time Between Failures) (Correct answer)
MTTR (Mean Time To Recovery)
SLA (Service Level Agreement)

Correct answer: MTBF (Mean Time Between Failures)

MTBF quantifies system reliability by calculating the average operational time between failures, helping organizations predict maintenance needs.

Question 16: In the context of security controls, what is the primary purpose of a deterrent control?

To identify vulnerabilities before exploitation
To discourage potential attackers from attempting an attack (Correct answer)
To restore systems to a known good state
To detect intrusions after they occur

Correct answer: To discourage potential attackers from attempting an attack

Deterrent controls aim to discourage would-be attackers by making an attack seem difficult, risky, or not worthwhile.

Question 17: PCI DSS compliance is required for organizations that:

Store, process, or transmit payment card data (Correct answer)
Use open-source software in production
Operate in more than one US state
Employ more than 500 IT staff

Correct answer: Store, process, or transmit payment card data

PCI DSS (Payment Card Industry Data Security Standard) applies to any entity that handles cardholder data to protect against payment fraud.

Question 18: Which scheduling technique uses optimistic, pessimistic, and most-likely time estimates to calculate expected task duration?

Program Evaluation and Review Technique (PERT) (Correct answer)
Critical Path Method (CPM)
Gantt charting
Agile sprint planning

Correct answer: Program Evaluation and Review Technique (PERT)

PERT uses three-point estimation (optimistic, pessimistic, most likely) to compute a weighted average expected duration under uncertainty.

Question 19: What is 'cache coherency' and why is it critical in multi-core systems?

Maintaining the same cache hit rate across all CPU cores
Synchronizing the clock signals across multiple processor dies
Ensuring all cores see a consistent view of shared memory despite having private caches (Correct answer)
Ensuring all cache levels use the same replacement policy

Correct answer: Ensuring all cores see a consistent view of shared memory despite having private caches

Cache coherency ensures that when multiple cores have cached copies of the same memory location, all cores observe a consistent and up-to-date value, preventing stale data errors.

Question 20: In the context of tcp/ip & osi model layers, what role does continuous professional development play for CCP practitioners?

It is optional and only needed for career advancement
It serves primarily as a networking opportunity with no practical benefit
It is required only during the first year of certification
It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in tcp/ip & osi model layers because it ensures CCP practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 21: What is the primary ethical obligation of a CCP professional when a conflict of interest arises during cpu architecture & instruction sets activities?

Resolve the conflict privately without informing stakeholders
Disclose the conflict to all relevant parties and recuse from the decision if necessary (Correct answer)
Proceed while favoring the outcome that benefits the professional personally
Ignore the conflict if it does not directly affect the current task

Correct answer: Disclose the conflict to all relevant parties and recuse from the decision if necessary

The primary ethical obligation when a conflict of interest arises in cpu architecture & instruction sets is to disclose it to all relevant parties and, if necessary, recuse from the decision. This maintains professional integrity and stakeholder trust.

Question 22: A CCP professional encounters an unfamiliar situation while performing sorting, searching & big-o duties. What is the most appropriate first action?

Consult relevant standards, guidelines, or a qualified supervisor before proceeding (Correct answer)
Skip the task entirely and move to the next assignment
Proceed based on general assumptions to avoid delays
Apply a solution from an unrelated field without verification

Correct answer: Consult relevant standards, guidelines, or a qualified supervisor before proceeding

When facing unfamiliar situations in sorting, searching & big-o, the most appropriate action is to consult relevant standards, guidelines, or a qualified supervisor. This ensures safety, accuracy, and compliance while building professional knowledge.

Question 23: Differential backup differs from incremental backup in that it:

Compresses data more aggressively than incremental backups
Copies all data changed since the last full backup, regardless of intermediate backups (Correct answer)
Copies only data changed since the last backup of any type
Runs less frequently than incremental backups

Correct answer: Copies all data changed since the last full backup, regardless of intermediate backups

Differential backups always back up all changes since the last full backup, making restoration simpler (full + latest differential) but using more storage than incremental.

Question 24: Which NoSQL database type is best suited for storing and querying highly connected data such as social networks?

Graph database (Correct answer)
Key-value store
Document store
Column-family store

Correct answer: Graph database

Graph databases use nodes and edges to represent and traverse relationships, making them optimal for highly connected data like social networks.

Question 25: What is the role of an information system in an organization?

Only store employee records.
Develop desktop wallpapers.
Support business processes and decision making (Correct answer)
Create social media posts.

Correct answer: Support business processes and decision making

The role of an information system (IS) in an organization is to collect, process, store, and distribute information to support business operations and facilitate decision-making. IS helps streamline processes, enhance communication, and provide valuable insights for strategic planning and problem-solving. By leveraging data, information systems enable organizations to operate more efficiently and effectively.

Question 26: A Business Impact Analysis (BIA) primarily identifies:

Employee performance metrics during crises
Hardware replacement costs
Critical business functions and the impact of their disruption (Correct answer)
Network vulnerabilities and attack vectors

Correct answer: Critical business functions and the impact of their disruption

A BIA identifies critical business processes and evaluates the financial and operational impact of their disruption to prioritize recovery efforts.

Question 27: Which of the following best describes a 'warm site' in disaster recovery?

A facility with hardware pre-installed but requiring data restoration before use (Correct answer)
A cloud snapshot updated every 24 hours
An empty building with only power and cooling
A fully operational duplicate data center

Correct answer: A facility with hardware pre-installed but requiring data restoration before use

A warm site has hardware and network connectivity in place but lacks current data, requiring restoration from backups before normal operations can resume.

Question 28: Which cipher is theoretically unbreakable when used correctly because its key is as long as the message and used only once?

Caesar cipher
One-time pad (Correct answer)
Vigenère cipher
Blowfish cipher

Correct answer: One-time pad

The one-time pad is provably unbreakable when the key is truly random, at least as long as the message, secret, and never reused.

Question 29: Which of the following is a fundamental principle of tcp/ip & osi model layers as it applies to Certified Computing Professional?

Prioritizing speed of completion over accuracy and compliance
Relying solely on personal experience without reference to guidelines
Avoiding documentation to streamline workflow efficiency
Systematic evaluation and adherence to established industry standards (Correct answer)

Correct answer: Systematic evaluation and adherence to established industry standards

A fundamental principle of tcp/ip & osi model layers in Certified Computing Professional is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.

Question 30: A project manager uses a RACI matrix to clarify:

Roles and responsibilities for project activities (Correct answer)
Budget allocations per task
Resource availability calendars
Risk scores for deliverables

Correct answer: Roles and responsibilities for project activities

A RACI matrix maps each task to who is Responsible, Accountable, Consulted, and Informed, eliminating ambiguity.

Question 31: Which data structure uses a LIFO (Last In, First Out) access pattern?

Stack (Correct answer)
Binary Tree
Queue
Linked List

Correct answer: Stack

A stack follows LIFO order, meaning the last element pushed is the first one popped.

Question 32: An employee is given access to only the specific files needed for their current project. This practice reflects which security principle?

Defense in depth
Separation of duties
Accountability
Need to know (Correct answer)

Correct answer: Need to know

The need-to-know principle limits information access to only what is required for a person's specific role or task.

Question 33: What is steganography in the context of information security?

Encrypting data using a symmetric algorithm
Compressing data to reduce transmission overhead
Hiding data within other non-secret data to conceal its existence (Correct answer)
Converting data into an unreadable format using keys

Correct answer: Hiding data within other non-secret data to conceal its existence

Steganography hides secret information within ordinary, non-secret files (such as images or audio) so that the existence of the hidden message is concealed.

Question 34: A cold site in disaster recovery is best described as:

A facility with power and connectivity but no pre-installed hardware or data (Correct answer)
A cloud-based backup solution
A mobile recovery unit
A facility fully mirroring the primary data center

Correct answer: A facility with power and connectivity but no pre-installed hardware or data

A cold site provides only the basic infrastructure (power, HVAC, connectivity) and requires equipment installation and data restoration before use.

Question 35: A hash table resolves collisions using chaining by storing colliding elements in a:

Linked list at each bucket (Correct answer)
Sorted array at each bucket
Binary tree at each bucket
Stack at each bucket

Correct answer: Linked list at each bucket

Chaining stores all keys that hash to the same bucket in a linked list attached to that bucket.

Question 36: What is a materialized view in a relational database?

A view that updates in real time with every underlying data change
A virtual table defined by a SELECT statement with no stored data
A precomputed query result stored as a physical table (Correct answer)
An indexed view that is recalculated on every query

Correct answer: A precomputed query result stored as a physical table

A materialized view stores the result of a query physically on disk, improving read performance for expensive queries at the cost of storage and refresh overhead.

Question 37: The 3-2-1 backup rule states you should have:

3 sites, 2 hot and 1 cold
3 RPOs, 2 RTOs, 1 BIA
3 backups per day, 2 onsite, 1 encrypted
3 copies of data, on 2 different media, with 1 stored offsite (Correct answer)

Correct answer: 3 copies of data, on 2 different media, with 1 stored offsite

The 3-2-1 rule recommends three total copies of data stored on two different types of media with one copy kept offsite for disaster protection.

Question 38: Which property of a cryptographic hash function ensures that two different inputs cannot produce the same hash output?

Avalanche effect
Collision resistance (Correct answer)
Preimage resistance
Key diffusion

Correct answer: Collision resistance

Collision resistance means it is computationally infeasible to find two different inputs that produce the same hash output.

Question 39: What is a variable in programming?

A fixed instruction.
An unchangeable number.
A program title.
A named space to store data values (Correct answer)

Correct answer: A named space to store data values

In programming, a variable is a symbolic name given to a storage location in memory that holds a value. This value can be changed or 'varied' during the execution of a program, allowing programmers to store and manipulate data dynamically. Variables are fundamental building blocks for all programming languages.

Question 40: What is 'speculative execution' in modern CPU design?

Delaying instruction execution until all operands are ready
Running the same instruction on multiple cores to verify results
Executing instructions at a lower voltage to save power speculatively
Executing instructions before it is certain they will be needed, based on predictions (Correct answer)

Correct answer: Executing instructions before it is certain they will be needed, based on predictions

Speculative execution allows the CPU to execute instructions ahead of confirmed need (e.g., after a predicted branch), discarding results if the speculation proves incorrect.

Question 41: Which software development methodology emphasizes iterative development, customer collaboration, and responding to change?

PRINCE2
Waterfall
CMMI
Agile (Correct answer)

Correct answer: Agile

Agile methodology prioritizes iterative delivery, continuous feedback, and flexibility over rigid upfront planning.

Question 42: The principle of least privilege means:

Users should be granted only the minimum access rights necessary to perform their job (Correct answer)
Administrators should use unprivileged accounts for daily tasks
System services should run as root only when required
Network ports should be opened only for active connections

Correct answer: Users should be granted only the minimum access rights necessary to perform their job

The principle of least privilege limits user and system access rights to the bare minimum required for their role, reducing the attack surface.

Question 43: In project management, a Work Breakdown Structure (WBS) is used to:

Schedule resource allocation across project phases
Estimate the cost variance between planned and actual spending
Decompose a project into smaller, manageable components and deliverables (Correct answer)
Assign risk probability scores to project tasks

Correct answer: Decompose a project into smaller, manageable components and deliverables

A WBS hierarchically breaks down the total project scope into smaller work packages, making planning, scheduling, and cost estimating more manageable.

Question 44: Which SQL clause is used to filter grouped results after a GROUP BY operation?

FILTER
ORDER BY
WHERE
HAVING (Correct answer)

Correct answer: HAVING

The HAVING clause filters the results of aggregate functions applied to groups, unlike WHERE which filters individual rows before grouping.

Question 45: Which backup strategy involves copying only the files that have changed since the last full backup?

Differential backup
Mirror backup
Incremental backup (Correct answer)
Full backup

Correct answer: Incremental backup

Incremental backup copies only data changed since the last backup of any type, minimizing storage use but requiring multiple sets for restoration.

Question 46: In an entity-relationship (ER) diagram, a weak entity is characterized by:

Having multiple candidate keys
Having no attributes
Being represented with a single rectangle
Lacking a primary key on its own and depending on a strong entity (Correct answer)

Correct answer: Lacking a primary key on its own and depending on a strong entity

A weak entity cannot be uniquely identified by its own attributes alone and relies on the primary key of a related strong entity for identification.

Question 47: Which indexing structure is most efficient for range queries on numerical data in relational databases?

Hash index
B-tree index (Correct answer)
Bitmap index
Full-text index

Correct answer: B-tree index

B-tree indexes store data in sorted order, making them ideal for range queries since rows within a range can be traversed sequentially.

Question 48: What is requirement engineering?

Creating network configurations.
Coding in Python.
Determining software system needs and constraints (Correct answer)
Writing user manuals.

Correct answer: Determining software system needs and constraints

Requirement engineering is the critical first phase in software development, focused on systematically determining, documenting, and managing the needs and constraints of a software system. This involves eliciting requirements from stakeholders, analyzing them for consistency and completeness, and specifying them clearly. A thorough understanding of requirements ensures the developed software effectively solves the intended problem.

Question 49: Which of the following is a characteristic of relational databases?

Data is stored in hierarchical files.
Data is stored in networked objects.
Data is stored in table structures with defined relationships (Correct answer)
Data is stored as raw binary blobs.

Correct answer: Data is stored in table structures with defined relationships

A characteristic of relational databases is that data is stored in a structured format using tables, also known as relations. Each table consists of rows and columns, and relationships between different tables are established through common fields, typically using primary and foreign keys. This tabular structure allows for efficient data organization, querying, and integrity management.

Question 50: Which normal form eliminates transitive dependencies among non-key attributes?

Second Normal Form (2NF)
First Normal Form (1NF)
Third Normal Form (3NF) (Correct answer)
Boyce-Codd Normal Form (BCNF)

Correct answer: Third Normal Form (3NF)

3NF removes transitive dependencies where a non-key column depends on another non-key column rather than directly on the primary key.

Question 51: What is 'data vaulting' in the context of disaster recovery?

Electronically transmitting backup data to a secure offsite storage facility (Correct answer)
Physically locking tape drives in a fireproof safe
Testing data integrity after a backup completes
Encrypting data before it is written to disk

Correct answer: Electronically transmitting backup data to a secure offsite storage facility

Electronic vaulting (data vaulting) automatically transfers backup data over a network to an offsite facility, eliminating the need for physical media transport.

Question 52: In risk assessment, the formula Risk = Threat × Vulnerability × Impact is used to:

Schedule penetration testing intervals
Determine backup frequency requirements
Calculate the cost of implementing controls
Quantify the level of risk associated with an asset (Correct answer)

Correct answer: Quantify the level of risk associated with an asset

This formula combines the likelihood of a threat exploiting a vulnerability with the resulting business impact to produce a risk score for prioritization.

Question 53: Which control is BEST described as a corrective control?

Patch management restoring a compromised system (Correct answer)
Firewall blocking unauthorized traffic
Warning sign on a restricted area
Security camera recording activity

Correct answer: Patch management restoring a compromised system

Patch management that restores a compromised system is a corrective control because it fixes damage after an incident occurs.

Question 54: Which language is primarily used for managing data in a relational database?

JavaScript
HTML
Python
SQL (Correct answer)

Correct answer: SQL

SQL (Structured Query Language) is the standard language specifically designed for managing and manipulating data in relational databases. It allows users to perform various operations such as querying data, inserting new records, updating existing ones, and defining database schemas. Its declarative nature makes it highly effective for interacting with relational database management systems.

Question 55: What distinguishes a hash function from encryption?

Hashing uses larger keys than encryption
Hashing requires two parties to share a key
Hashing is faster than encryption
Hashing is a one-way function with no decryption key (Correct answer)

Correct answer: Hashing is a one-way function with no decryption key

Hashing is a one-way function designed to be irreversible; there is no key and the original data cannot be recovered from the hash.

Question 56: What does RPO (Recovery Point Objective) represent?

The cost of data restoration
The number of recovery sites required
The geographic location of backup systems
Maximum tolerable data loss measured in time (Correct answer)

Correct answer: Maximum tolerable data loss measured in time

RPO defines the maximum age of data that must be recovered from backup storage for normal operations to resume after a failure.

Question 57: An organization's DR plan assigns a priority of Tier 1 to its order processing system. This means the system:

Requires manual recovery procedures only
Can tolerate the longest downtime
Has the lowest recovery priority due to its complexity
Must be recovered first because it is most critical to business operations (Correct answer)

Correct answer: Must be recovered first because it is most critical to business operations

Tier 1 in DR tiering identifies mission-critical systems that must be restored first because their outage causes immediate, severe business impact.

Question 58: In MongoDB, which operation is used to update only specific fields in a document without replacing the entire document?

insertOne()
findOneAndReplace()
replaceOne()
updateOne() with $set (Correct answer)

Correct answer: updateOne() with $set

updateOne() with the $set operator modifies only the specified fields of a document, leaving the rest of the document unchanged.

Question 59: What is a composite key in relational database design?

A key composed of encrypted values
A primary key made up of two or more attributes (Correct answer)
A surrogate key generated by the database system
A key that references multiple foreign tables

Correct answer: A primary key made up of two or more attributes

A composite key uses two or more attributes together to uniquely identify a row in a table when no single attribute alone can serve as a unique identifier.

Question 60: Which abstract data type operates on a FIFO (First In, First Out) principle?

Stack
Heap
Queue (Correct answer)
Graph

Correct answer: Queue

A queue processes elements in FIFO order — the first element enqueued is the first dequeued.

Question 61: Which wireless standard operates exclusively in the 5 GHz band?

802.11g
802.11b
802.11n
802.11a (Correct answer)

Correct answer: 802.11a

802.11a operates only in the 5 GHz frequency band, offering up to 54 Mbps throughput.

Question 62: In Test-Driven Development (TDD), what is the correct order of the development cycle?

Write test → Write code → Refactor (Correct answer)
Write code → Write test → Refactor
Write test → Refactor → Write code
Refactor → Write test → Write code

Correct answer: Write test → Write code → Refactor

TDD follows a Red-Green-Refactor cycle: write a failing test first, write minimum code to pass it, then refactor while keeping tests passing.

Question 63: In a relational schema, a foreign key constraint ensures which property?

User-defined integrity
Referential integrity (Correct answer)
Entity integrity
Domain integrity

Correct answer: Referential integrity

A foreign key constraint enforces referential integrity by ensuring that a value in one table corresponds to an existing value in the referenced table.

Question 64: What is the primary function of a Database Management System (DBMS)?

To write code in Java.
To manage and control databases efficiently (Correct answer)
To design computer networks.
To develop mobile apps.

Correct answer: To manage and control databases efficiently

The primary function of a Database Management System (DBMS) is to efficiently manage, store, retrieve, and organize data in a structured manner. It provides an interface for users and applications to interact with the database, ensuring data integrity, security, and concurrent access. A DBMS is fundamental for handling large volumes of information reliably.

Question 65: What does RTO (Recovery Time Objective) define in a disaster recovery plan?

The frequency of backup operations
The maximum acceptable downtime before systems must be restored (Correct answer)
The cost of recovering from a disaster
The amount of data that can be lost in a disaster

Correct answer: The maximum acceptable downtime before systems must be restored

RTO is the maximum acceptable length of time that a system can be offline before the outage causes unacceptable business impact.

Question 66: Which IT governance framework uses a balanced scorecard approach to measure IT performance across four perspectives?

ITIL
PMBOK
TOGAF
COBIT (Correct answer)

Correct answer: COBIT

COBIT incorporates balanced scorecard concepts, measuring IT performance from financial, customer, internal process, and learning/growth perspectives.

Question 67: What does the term 'instruction latency' refer to in CPU pipeline design?

The maximum clock frequency of the CPU
The number of cycles required to complete an instruction before its result is available (Correct answer)
The size of the instruction cache
The number of pipeline stages in the processor

Correct answer: The number of cycles required to complete an instruction before its result is available

Instruction latency is the total number of clock cycles from when an instruction begins execution until its result can be used by a subsequent instruction.

Question 68: Which term describes the process of testing disaster recovery plans through simulation without actually switching over production systems?

Tabletop exercise (Correct answer)
Full interruption test
Parallel test
Checklist review

Correct answer: Tabletop exercise

A tabletop exercise is a discussion-based session where team members walk through a disaster scenario verbally to identify gaps without disrupting operations.

Question 69: Which type of encryption uses the same key for both encryption and decryption?

Symmetric encryption (Correct answer)
Hybrid encryption
Asymmetric encryption
Public-key encryption

Correct answer: Symmetric encryption

Symmetric encryption uses a single shared secret key for both encrypting and decrypting data, making it fast but requiring secure key distribution.

Question 70: A circular linked list differs from a standard linked list in that the last node's pointer points to the:

Previous node
Itself
Head (first) node (Correct answer)
Null/None

Correct answer: Head (first) node

In a circular linked list, the tail node's next pointer wraps back to the head, forming a continuous loop.

Question 71: ISO/IEC 27001 is an international standard for:

Cloud service provider auditing
Network equipment certification
Software quality assurance
Information security management systems (ISMS) (Correct answer)

Correct answer: Information security management systems (ISMS)

ISO/IEC 27001 specifies requirements for establishing, implementing, maintaining, and continually improving an information security management system.

Question 72: What is a firewall used for?

Editing video content.
Filtering unauthorized access and securing networks (Correct answer)
Speeding up software downloads.
Increasing printer speed.

Correct answer: Filtering unauthorized access and securing networks

A firewall acts as a security barrier, monitoring and controlling incoming and outgoing network traffic based on predefined security rules. Its main function is to prevent unauthorized access to a private network and protect against various cyber threats by filtering malicious data. Firewalls are a critical component of network security.

Question 73: Which type of disaster recovery site is fully equipped and operational, ready to take over immediately?

Mirror site
Hot site (Correct answer)
Cold site
Warm site

Correct answer: Hot site

A hot site is a fully operational duplicate of the primary site that can take over immediately with little to no downtime.

Question 74: In Apache Cassandra, data is distributed across nodes using which mechanism?

Two-phase commit protocol
Master-slave replication
Consistent hashing with a token ring (Correct answer)
B-tree partitioning

Correct answer: Consistent hashing with a token ring

Cassandra uses consistent hashing with a token ring to distribute data across nodes, ensuring even distribution and enabling linear scalability.

Question 75: A CCP professional encounters an unfamiliar situation while performing relational & nosql database design duties. What is the most appropriate first action?

Apply a solution from an unrelated field without verification
Proceed based on general assumptions to avoid delays
Consult relevant standards, guidelines, or a qualified supervisor before proceeding (Correct answer)
Skip the task entirely and move to the next assignment

Correct answer: Consult relevant standards, guidelines, or a qualified supervisor before proceeding

When facing unfamiliar situations in relational & nosql database design, the most appropriate action is to consult relevant standards, guidelines, or a qualified supervisor. This ensures safety, accuracy, and compliance while building professional knowledge.

Question 76: What does the term 'coupling' refer to in software design?

The process of linking libraries to an executable
The degree of interdependence between software modules (Correct answer)
The speed at which modules communicate
The number of methods in a class

Correct answer: The degree of interdependence between software modules

Coupling refers to how much one module depends on another; low coupling is preferred for maintainable, modular designs.

Question 77: What is a 'race condition' in concurrent programming?

A bug where program behavior depends on unpredictable timing of multiple threads (Correct answer)
A scheduling algorithm that prioritizes faster processes
A performance benchmark where two algorithms compete
A design pattern for parallel processing

Correct answer: A bug where program behavior depends on unpredictable timing of multiple threads

A race condition occurs when a program's outcome depends on the relative timing of concurrent threads or processes accessing shared resources.

Question 78: Which RAID level provides disk mirroring with no parity, offering full redundancy?

RAID 1 (Correct answer)
RAID 0
RAID 5
RAID 6

Correct answer: RAID 1

RAID 1 mirrors data across two drives, so if one fails the other contains an identical copy, providing full redundancy at the cost of 50% storage efficiency.

Question 79: In the context of cpu architecture & instruction sets, what role does continuous professional development play for CCP practitioners?

It is optional and only needed for career advancement
It is required only during the first year of certification
It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It serves primarily as a networking opportunity with no practical benefit

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in cpu architecture & instruction sets because it ensures CCP practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 80: Which technology replicates data to a secondary location in real time to support near-zero RPO?

Asynchronous replication
Scheduled batch transfer
Synchronous replication (Correct answer)
Tape rotation

Correct answer: Synchronous replication

Synchronous replication writes data simultaneously to both primary and secondary locations, ensuring zero or near-zero data loss but requiring low-latency links.

Question 81: Which design pattern ensures a class has only one instance and provides a global point of access to it?

Singleton (Correct answer)
Observer
Factory
Decorator

Correct answer: Singleton

The Singleton pattern restricts instantiation of a class to one object and provides a global access point.

Question 82: Which model is considered the traditional software development lifecycle model?

V-Model
Agile Model
Spiral Model
Waterfall Model (Correct answer)

Correct answer: Waterfall Model

The Waterfall Model is considered the traditional software development lifecycle model due to its linear and sequential approach. In this model, each phase of development, such as requirements gathering, design, implementation, testing, and maintenance, must be completed before the next phase begins. This structured, document-driven methodology was one of the earliest and most widely adopted approaches.

Question 83: What is a 'superscalar' processor?

A processor with a very high clock frequency above 4 GHz
A processor with more than 64 general-purpose registers
A processor that can issue and execute multiple instructions per clock cycle (Correct answer)
A processor that uses VLIW instruction encoding

Correct answer: A processor that can issue and execute multiple instructions per clock cycle

A superscalar processor contains multiple execution units and can dispatch more than one instruction per clock cycle, achieving instruction-level parallelism.

Question 84: In the context of sorting, searching & big-o, what role does continuous professional development play for CCP practitioners?

It serves primarily as a networking opportunity with no practical benefit
It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It is optional and only needed for career advancement
It is required only during the first year of certification

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in sorting, searching & big-o because it ensures CCP practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 85: Mean Time To Recovery (MTTR) measures:

The probability of a system failing within a given period
The average time required to restore a failed system to full operation (Correct answer)
The cost per hour of system downtime
The average time between system failures

Correct answer: The average time required to restore a failed system to full operation

MTTR is the average elapsed time from when a failure occurs until the system is fully operational again, used to evaluate the efficiency of recovery processes.

Question 86: A priority queue dequeues elements based on:

Random selection
Alphabetical order
Insertion order
Assigned priority value (Correct answer)

Correct answer: Assigned priority value

A priority queue always removes the element with the highest (or lowest) priority value, regardless of insertion order.

Question 87: What does 'exception handling' allow a program to do?

Respond to error conditions gracefully without crashing (Correct answer)
Automatically fix bugs in the source code
Prevent all runtime errors from occurring
Log performance metrics for debugging

Correct answer: Respond to error conditions gracefully without crashing

Exception handling allows a program to detect, respond to, and recover from runtime errors in a controlled manner.

Question 88: Which graph representation uses a 2D matrix to indicate edges between vertices?

Incidence matrix
Edge table
Adjacency matrix (Correct answer)
Adjacency list

Correct answer: Adjacency matrix

An adjacency matrix uses an n×n boolean (or weighted) matrix where entry [i][j] indicates an edge from vertex i to vertex j.

Question 89: Which Agile framework uses the concepts of 'value streams' and 'Agile Release Trains' to scale Agile across large enterprises?

Scrum of Scrums
LeSS (Large-Scale Scrum)
DSDM (Dynamic Systems Development Method)
SAFe (Scaled Agile Framework) (Correct answer)

Correct answer: SAFe (Scaled Agile Framework)

SAFe (Scaled Agile Framework) organizes teams into Agile Release Trains aligned to value streams to coordinate large-scale Agile delivery.

Question 90: In graph theory, a graph where all edges have a direction is called a:

Weighted graph
Cyclic graph
Directed graph (digraph) (Correct answer)
Undirected graph

Correct answer: Directed graph (digraph)

A directed graph (digraph) has edges with a specific direction, represented by arrows from one vertex to another.

Question 91: What is the key difference between a 'compiled' language and an 'interpreted' language?

Compiled languages require an IDE; interpreted languages run in the browser only
Compiled code is translated to machine code before execution; interpreted code is translated line-by-line at runtime (Correct answer)
Compiled languages support OOP; interpreted languages do not
Compiled languages are always faster; interpreted languages are always slower

Correct answer: Compiled code is translated to machine code before execution; interpreted code is translated line-by-line at runtime

Compiled languages translate the entire source code to machine code before execution, while interpreted languages translate and execute code line-by-line at runtime.

Question 92: What is the key length used by AES-256?

256 bits (Correct answer)
128 bits
192 bits
512 bits

Correct answer: 256 bits

AES-256 uses a 256-bit key, which is the longest standard key size for AES and provides the highest security level of the AES variants.

Question 93: In a binary tree, a node with no children is called a:

Leaf (Correct answer)
Parent
Root
Branch

Correct answer: Leaf

A leaf node is a node in a binary tree that has no left or right child.

Question 94: What is a failover cluster primarily used for?

Automatically switching to a standby system when the primary fails (Correct answer)
Load balancing across multiple servers
Archiving old data to cold storage
Encrypting data during transmission

Correct answer: Automatically switching to a standby system when the primary fails

A failover cluster monitors nodes and automatically redirects workloads to a surviving node when a failure is detected, minimizing downtime.

Question 95: The space complexity of an adjacency list representation for a graph with V vertices and E edges is:

O(V²)
O(V + E) (Correct answer)
O(E²)
O(V × E)

Correct answer: O(V + E)

An adjacency list stores each vertex once and each edge once (or twice for undirected), giving O(V + E) space.

Question 96: What is the time complexity of accessing an element by index in an array?

O(n)
O(1) (Correct answer)
O(log n)
O(n²)

Correct answer: O(1)

Arrays provide O(1) random access because elements are stored at contiguous memory addresses.

Question 97: Which isolation level prevents dirty reads but still allows non-repeatable reads in SQL transactions?

Read Uncommitted
Serializable
Repeatable Read
Read Committed (Correct answer)

Correct answer: Read Committed

Read Committed prevents dirty reads by only allowing reads of committed data, but the same row can return different values if re-read within the same transaction.

Question 98: In the context of sdlc & agile development, what role does continuous professional development play for CCP practitioners?

It is optional and only needed for career advancement
It ensures practitioners remain current with evolving standards, technologies, and best practices (Correct answer)
It serves primarily as a networking opportunity with no practical benefit
It is required only during the first year of certification

Correct answer: It ensures practitioners remain current with evolving standards, technologies, and best practices

Continuous professional development is essential in sdlc & agile development because it ensures CCP practitioners remain current with evolving standards, technologies, and best practices, maintaining competency throughout their careers.

Question 99: Which component ensures security in a database system?

Query processor.
Backup utility.
Security module (Correct answer)
Report generator.

Correct answer: Security module

The security module in a database system is specifically designed to enforce security policies. It controls user access, manages permissions, and ensures data confidentiality and integrity by preventing unauthorized actions. This component is crucial for protecting sensitive information within the database.

Question 100: Which of the following is a fundamental principle of relational & nosql database design as it applies to Certified Computing Professional?

Avoiding documentation to streamline workflow efficiency
Systematic evaluation and adherence to established industry standards (Correct answer)
Relying solely on personal experience without reference to guidelines
Prioritizing speed of completion over accuracy and compliance

Correct answer: Systematic evaluation and adherence to established industry standards

A fundamental principle of relational & nosql database design in Certified Computing Professional is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.

Question 101: Which data structure is most appropriate for implementing an undo feature in a text editor?

Queue
Array
Hash Table
Stack (Correct answer)

Correct answer: Stack

A stack is ideal for undo because each action is pushed on the stack and the most recent action (last pushed) is reversed first.

Question 102: In a singly linked list, each node contains data and a pointer to which node?

The next node (Correct answer)
The tail node
The head node
The previous node

Correct answer: The next node

In a singly linked list, each node holds a reference (pointer) to the next node in the sequence.

Question 103: Which of the following is a fundamental principle of iaas, paas & saas models as it applies to Certified Computing Professional?

Systematic evaluation and adherence to established industry standards (Correct answer)
Relying solely on personal experience without reference to guidelines
Avoiding documentation to streamline workflow efficiency
Prioritizing speed of completion over accuracy and compliance

Correct answer: Systematic evaluation and adherence to established industry standards

A fundamental principle of iaas, paas & saas models in Certified Computing Professional is the systematic evaluation and adherence to established industry standards, which ensures consistency, quality, and regulatory compliance across all professional activities.

Question 104: A doubly linked list differs from a singly linked list in that each node has pointers to:

Two next nodes
Every other node
Both the next and previous nodes (Correct answer)
The head and tail only

Correct answer: Both the next and previous nodes

A doubly linked list maintains both a next and a previous pointer in each node, enabling bidirectional traversal.

Question 105: What is the primary purpose of a Business Continuity Plan (BCP)?

To document all IT assets and their replacement costs
To ensure critical business operations continue during and after a disaster (Correct answer)
To define employee roles during non-emergency operations
To schedule routine maintenance windows

Correct answer: To ensure critical business operations continue during and after a disaster

A BCP outlines procedures and strategies to ensure essential business functions remain operational or resume quickly after a disruptive event.

Question 106: Which data structure is best suited for implementing breadth-first search (BFS) in a graph?

Stack
Heap
Queue (Correct answer)
Priority Queue

Correct answer: Queue

BFS uses a queue to explore vertices level by level, processing each neighbor before moving deeper.

Question 107: What is data integrity in a database system?

Duplicating records frequently.
Allowing unauthorized updates.
Using inconsistent formats.
Ensuring data accuracy and consistency (Correct answer)

Correct answer: Ensuring data accuracy and consistency

Data integrity refers to the overall completeness, accuracy, and consistency of data throughout its lifecycle. It ensures that data remains valid and reliable, preventing errors and inconsistencies that could arise from unauthorized access, accidental changes, or system failures. Maintaining data integrity is fundamental for trustworthy database operations.

Question 108: In a column-family NoSQL database like HBase, data is organized into:

Flat key-value pairs with no structure
Rows identified by a row key, grouped into column families (Correct answer)
Documents with nested subdocuments
Nodes and edges representing relationships

Correct answer: Rows identified by a row key, grouped into column families

Column-family databases group related columns into column families, allowing efficient retrieval of all columns in a family for a given row key.

Question 109: Which traversal visits a binary tree's left subtree, then the root, then the right subtree?

Post-order
Pre-order
In-order (Correct answer)
Level-order

Correct answer: In-order

In-order traversal (Left → Root → Right) visits nodes in ascending order for a binary search tree.

Question 110: What does 'DRY' stand for in software development best practices?

Dynamic Runtime Yielding
Don't Repeat Yourself (Correct answer)
Data Retrieval Yielding
Distributed Runtime Yielding

Correct answer: Don't Repeat Yourself

DRY (Don't Repeat Yourself) is a principle that promotes reducing repetition by abstracting common logic into reusable components.

Certified Computing Professional (CCP)

The ICCP Certified Computing Professional (CCP) validates broad computing knowledge across software engineering, data management, security, and IT management. Candidates must pass a written examination and demonstrate at least 48 months of experience in computer-based information systems.

110

Questions

90 min

Time Limit

70%

To Pass

Checking for saved progress...

Exam Rules

You can skip questions and return to them later
Flag questions for review before submitting
No feedback shown until you submit the entire exam
Unanswered questions count as wrong — answer everything
10 pretest questions are mixed in and don't affect your score
Timer auto-submits when time runs out
Your progress is auto-saved every 30 seconds

These practice questions were written with AI tools. They are not real exam questions. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

iccp.org — Eligibility, fees, passing score, retake policy, time limit · verified Oct 2026