CCP Cybersecurity Principles & Risk Management 2

Question 1

Which risk treatment option involves transferring the financial impact of a risk to a third party?

Accepted Answer

Risk transference

Answer

Risk transference shifts the financial burden of a risk to another party, such as an insurance provider or outsourced vendor.

Question 2

What is the PRIMARY purpose of a Business Impact Analysis (BIA)?

Accepted Answer

Determine the criticality of business functions and recovery priorities

Answer

A BIA identifies critical business processes, quantifies the impact of disruptions, and establishes Recovery Time Objectives (RTOs) and Recovery Point Objectives (RPOs).

Question 3

An organization wants to ensure that no single employee can complete a high-risk transaction alone. Which principle does this implement?

Accepted Answer

Separation of duties

Answer

Separation of duties requires multiple individuals to complete a sensitive task, reducing the risk of fraud or error by any one person.

Question 4

In the NIST Cybersecurity Framework, which function focuses on developing and implementing appropriate safeguards to ensure delivery of critical services?

Accepted Answer

Protect

Answer

The Protect function encompasses safeguards such as access control, awareness training, data security, and protective technology to limit the impact of cybersecurity events.

Question 5

What term describes a weakness in a system that can be exploited by a threat actor?

Accepted Answer

Vulnerability

Answer

A vulnerability is a flaw or weakness in a system, process, or control that could be exploited to compromise security.

(CCP) Certified Cyber Professional Practice Test

(CCP) Certified Cyber Professional Practice Test

CCP Cybersecurity Principles & Risk Management 2