Content Domains Flashcards

Which CPP content domain carries the largest weight on the current exam?

Answer: Security Principles and Practices

Security Principles and Practices is the most heavily weighted domain, at about 22% of the exam.

A security manager calculates the annualized loss expectancy for a threat. Which formula is correct?

Answer: Single loss expectancy × annual rate of occurrence

ALE equals the single loss expectancy multiplied by the annualized rate of occurrence.

Under the 'four Ds' layered physical security concept, what is the correct order?

Answer: Deter, Detect, Delay, Deny

Layered protection first deters, then detects, delays, and finally denies access to the asset.

Which risk treatment option is being used when an organization buys insurance to cover theft losses?

Answer: Risk transfer

Insurance moves the financial impact of a loss to a third party, which is risk transfer.

In an investigation, which interview approach is generally recommended for obtaining truthful information from a cooperative witness?

Answer: Non-accusatory, open-ended questioning

Non-accusatory open-ended questions encourage witnesses to give complete narratives without contaminating their answers.

Which business metric best shows senior management the value of a security program?

Answer: Return on investment and loss reduction figures

Executives respond best to financial measures such as ROI and documented reductions in losses.

What is the primary purpose of a business impact analysis (BIA)?

Answer: Identifying critical functions and the impact of their disruption over time

A BIA identifies critical processes, recovery time objectives, and the effects of disruption.