CCP CIA Triad & Security Controls 4

Question 1

A digital signature on an email message provides evidence about which security property?

Accepted Answer

Non-repudiation

Answer

Digital signatures provide non-repudiation by proving the sender's identity and preventing them from denying they sent the message.

Question 2

Which of the following is an example of a technical (logical) security control?

Accepted Answer

Access control list on a file server

Answer

An access control list (ACL) is a technical control implemented in software to restrict access to resources.

Question 3

An organization uses offsite backups to ensure it can recover from a ransomware attack. Which CIA property do these backups primarily support?

Accepted Answer

Availability

Answer

Offsite backups support availability by enabling recovery and restoration of systems after a destructive attack.

Question 4

A man-in-the-middle attack that alters financial transaction amounts during transmission violates which CIA property?

Accepted Answer

Integrity

Answer

Altering transaction data in transit is a direct violation of integrity, as the data is modified without authorization.

Question 5

Which control is BEST described as a corrective control?

Accepted Answer

Patch management restoring a compromised system

Answer

Patch management that restores a compromised system is a corrective control because it fixes damage after an incident occurs.

(CCP) Certified Computing Professional Practice Test