CCP CIA Triad & Security Controls 2

Question 1

A hospital's patient records system allows doctors to read files but not modify them without a second physician approval. Which CIA property does this dual-approval mechanism primarily protect?

Accepted Answer

Integrity

Answer

Requiring dual approval before modifying records protects integrity by preventing unauthorized or accidental alterations to critical data.

Question 2

Which type of security control is a fire suppression system installed in a data center?

Accepted Answer

Preventive

Answer

A fire suppression system is a preventive control because it stops or limits damage before it fully occurs.

Question 3

An attacker intercepts encrypted communications but cannot read the content. Which CIA principle has been successfully preserved?

Accepted Answer

Confidentiality

Answer

Encryption preserves confidentiality by ensuring that unauthorized parties cannot read intercepted data.

Question 4

A DDoS attack floods a web server, making it unreachable to legitimate users. Which CIA property is most directly violated?

Accepted Answer

Availability

Answer

A DDoS attack targets availability by overwhelming resources so legitimate users cannot access the system.

Question 5

Security logs that record all administrative actions taken on a system are an example of which control type?

Accepted Answer

Detective

Answer

Audit logs are detective controls because they identify and record events after they occur for later analysis.

(CCP) Certified Computing Professional Practice Test

(CCP) Certified Computing Professional Practice Test

CCP CIA Triad & Security Controls 2