CPA Cybersecurity & Risk 2

Question 1

Which attack technique involves intercepting communication between two parties without their knowledge?

Accepted Answer

Man-in-the-Middle (MitM)

Answer

A Man-in-the-Middle attack positions the attacker between two communicating parties to intercept or alter data in transit.

Question 2

What is the primary purpose of a Security Information and Event Management (SIEM) system?

Accepted Answer

Aggregating and analyzing security logs in real time

Answer

A SIEM collects, correlates, and analyzes log data from multiple sources to detect and respond to security threats in real time.

Question 3

Which type of malware disguises itself as legitimate software to trick users into installing it?

Accepted Answer

Trojan Horse

Answer

A Trojan Horse masquerades as benign or useful software while secretly performing malicious actions once executed.

Question 4

In the context of risk management, what does 'residual risk' mean?

Accepted Answer

Risk that remains after controls have been applied

Answer

Residual risk is the level of risk that persists even after security controls and mitigation measures have been implemented.

Question 5

Which protocol is commonly used to securely transmit data over the web by encrypting HTTP traffic?

Accepted Answer

HTTPS

Answer

HTTPS (HTTP Secure) uses TLS/SSL encryption to protect data transmitted between a web browser and server.

(CPA) Certified Associate Programmer Practice Test