CCP CIA Triad & Security Controls 3

Question 1

A company implements redundant power supplies and backup generators for its servers. This configuration primarily addresses which CIA property?

Accepted Answer

Availability

Answer

Redundant power systems ensure servers remain operational during outages, directly supporting availability.

Question 2

Which security control category includes policies, procedures, and security awareness training?

Accepted Answer

Administrative controls

Answer

Administrative controls include management-level safeguards such as policies, procedures, and training programs.

Question 3

A bank teller can view customer balances but cannot transfer funds over $10,000 without manager approval. This is an example of which security principle?

Accepted Answer

Least privilege

Answer

Least privilege grants users only the minimum access rights necessary to perform their job functions.

Question 4

An intrusion detection system (IDS) generates an alert when unusual network traffic is observed. This is best classified as which type of control?

Accepted Answer

Detective

Answer

An IDS is a detective control because it identifies and alerts on suspicious activity without blocking it.

Question 5

Which of the following attacks most directly threatens data integrity?

Accepted Answer

SQL injection modifying database records

Answer

SQL injection that modifies database records directly violates integrity by altering stored data without authorization.

(CCP) Certified Computing Professional Practice Test

(CCP) Certified Computing Professional Practice Test

CCP CIA Triad & Security Controls 3