CCP CIA Triad & Security Controls 5

Question 1

A security policy that prohibits users from installing unauthorized software primarily functions as which type of control?

Accepted Answer

Preventive

Answer

A policy prohibiting unauthorized software is a preventive (administrative) control designed to stop risky actions before they occur.

Question 2

Which scenario represents a violation of all three CIA Triad properties simultaneously?

Accepted Answer

An attacker encrypts all files and takes the system offline after stealing sensitive data

Answer

Stealing data violates confidentiality, encrypting files violates integrity, and taking the system offline violates availability — hitting all three CIA properties.

Question 3

Which of the following is primarily a physical security control?

Accepted Answer

Mantrap entry system

Answer

A mantrap is a physical control consisting of two interlocking doors that prevents tailgating and unauthorized physical entry.

Question 4

An employee is given access to only the specific files needed for their current project. This practice reflects which security principle?

Accepted Answer

Need to know

Answer

The need-to-know principle limits information access to only what is required for a person's specific role or task.

Question 5

A CCTV system in a server room is used primarily as which type of security control?

Accepted Answer

Detective and deterrent

Answer

CCTV is detective (records activity for review) and deterrent (discourages misconduct when people know they are being recorded).

(CCP) Certified Computing Professional Practice Test

(CCP) Certified Computing Professional Practice Test

CCP CIA Triad & Security Controls 5