CPA Cybersecurity & Risk 3

Question 1

What is the main goal of penetration testing?

Accepted Answer

Simulating attacks to identify exploitable vulnerabilities

Answer

Penetration testing involves authorized simulated attacks on a system to uncover security weaknesses before malicious actors can exploit them.

Question 2

Which security principle ensures that users can only access resources necessary for their job function?

Accepted Answer

Least Privilege

Answer

The Least Privilege principle limits user access rights to only what is strictly required to perform their duties.

Question 3

What does 'phishing' typically rely on to compromise a victim?

Accepted Answer

Tricking users into revealing credentials via deceptive messages

Answer

Phishing uses deceptive emails or messages that impersonate trusted entities to manipulate users into disclosing sensitive information.

Question 4

Which CIA Triad component is directly threatened when a database is altered without authorization?

Accepted Answer

Integrity

Answer

Integrity ensures data accuracy and trustworthiness; unauthorized modifications directly violate this principle.

Question 5

What is the purpose of network segmentation in cybersecurity?

Accepted Answer

Limit lateral movement by containing breaches within smaller zones

Answer

Network segmentation divides a network into smaller isolated zones so that a breach in one segment cannot easily spread to others.

(CPA) Certified Associate Programmer Practice Test