CCP Compliance, Legal, & Ethical Issues 2

Question 1

Under the Computer Fraud and Abuse Act (CFAA), which activity is explicitly prohibited?

Accepted Answer

Accessing a protected computer without authorization

Answer

The CFAA prohibits unauthorized access to protected computers, including federal and financial systems and those used in interstate commerce.

Question 2

A company operating in California must comply with CCPA. Which right does CCPA grant consumers that HIPAA does NOT specifically provide?

Accepted Answer

Right to opt out of the sale of their personal information

Answer

CCPA grants California consumers the right to opt out of the sale of their personal information, which is a consumer-focused right not mirrored in HIPAA's healthcare-centric framework.

Question 3

Which ethical principle requires a cybersecurity professional to avoid conflicts of interest and remain objective in assessments?

Accepted Answer

Objectivity

Answer

Objectivity requires professionals to provide unbiased assessments free from personal or financial conflicts of interest.

Question 4

An organization subject to SOX must maintain internal controls over financial reporting. Which IT control directly supports SOX compliance?

Accepted Answer

Access control logs showing who modified financial data

Answer

SOX Section 404 requires controls ensuring the integrity of financial data; audit logs of financial system access directly demonstrate those controls.

Question 5

A security researcher discovers a zero-day vulnerability in a vendor's product. According to responsible disclosure ethics, what should they do FIRST?

Accepted Answer

Notify the vendor privately and allow time to patch

Answer

Responsible disclosure requires notifying the vendor first and providing reasonable time to develop and release a patch before any public disclosure.

(CCP) Certified Cybersecurity Professional Practice Test

(CCP) Certified Cybersecurity Professional Practice Test

CCP Compliance, Legal, & Ethical Issues 2