CCP Cybersecurity Fundamentals & Concepts 2

Question 1

Which cryptographic concept ensures that a sender cannot deny having sent a message?

Accepted Answer

Non-repudiation

Answer

Non-repudiation ensures that a party cannot deny the authenticity of their signature or the sending of a message.

Question 2

A company stores sensitive data encrypted at rest. Which security property is being protected?

Accepted Answer

Confidentiality

Answer

Encrypting data at rest protects confidentiality by preventing unauthorized access to stored information.

Question 3

What is the primary purpose of a Public Key Infrastructure (PKI)?

Accepted Answer

To manage digital certificates and public-key encryption

Answer

PKI manages the creation, distribution, and revocation of digital certificates that bind public keys to identities.

Question 4

Which attack type exploits trust relationships between a user's browser and a website to perform unauthorized actions?

Accepted Answer

Cross-Site Request Forgery (CSRF)

Answer

CSRF exploits the trust a web application has in an authenticated user's browser to perform unintended actions.

Question 5

In the context of access control, what does 'least privilege' mean?

Accepted Answer

Users receive only the minimum permissions needed to perform their job

Answer

Least privilege limits user access rights to only what is necessary to perform authorized tasks, reducing attack surface.

(CCP) Certified Cybersecurity Professional Practice Test