CRT Cybersecurity & Risk Management 1

Question 1

In CRT practice, what is the purpose of version control in software development?

Accepted Answer

To track changes, manage code history, and enable collaborative development

Answer

Version control systems track all changes to code over time, maintain a complete history of modifications, enable multiple developers to work simultaneously, and allow reverting to previous versions when issues arise.

Question 2

What does API stand for and what role does it play in CRT development?

Accepted Answer

Application Programming Interface — it defines how software components communicate with each other

Answer

An API (Application Programming Interface) defines the methods, data formats, and protocols that software components use to communicate. APIs enable integration between different systems and services.

Question 3

In CRT cybersecurity, what is the principle of least privilege?

Accepted Answer

Users should only have the minimum access rights necessary to perform their job functions

Answer

The principle of least privilege limits each user's access rights to only what is strictly necessary for their role, reducing the potential damage from accidents, errors, or malicious actions by minimizing the attack surface.

Question 4

What is the purpose of encryption in CRT data security?

Accepted Answer

To convert readable data into an unreadable format that can only be decoded with the proper key

Answer

Encryption transforms plaintext data into ciphertext using mathematical algorithms and keys, ensuring that only authorized parties with the correct decryption key can access the original information.

Question 5

In CRT project methodology, what distinguishes Agile from Waterfall?

Accepted Answer

Agile uses iterative sprints with continuous feedback, while Waterfall follows a sequential linear process

Answer

Agile development uses short iterative cycles (sprints) with continuous customer feedback and adaptation, while Waterfall follows a strict sequential process (requirements → design → implementation → testing → deployment) with limited iteration.

(CRT) Certified Retail Tobacconist Practice Test

(CRT) Certified Retail Tobacconist Practice Test

CRT Cybersecurity & Risk Management 1