CRT Cybersecurity & Risk Management 3

Question 1

A tobacco retailer discovers an unknown USB drive in the parking lot. The safest action is to:

Accepted Answer

Turn it over to IT security or destroy it without plugging it in

Answer

Found USB drives are a common attack vector; plugging them into any company device risks malware infection.

Question 2

What is a 'vulnerability assessment' in the context of a retail tobacco store's risk management plan?

Accepted Answer

A systematic review identifying weaknesses in security systems and processes

Answer

A vulnerability assessment identifies gaps in security posture before attackers can exploit them.

Question 3

A CRT candidate is reviewing incident response planning. Which element is MOST critical to include?

Accepted Answer

Clear roles, responsibilities, and communication steps during a security incident

Answer

An effective incident response plan defines who does what and how to communicate, enabling faster and less damaging responses.

Question 4

Encryption of customer data at rest means that data is scrambled when:

Accepted Answer

Stored on a device or server, even when not in transit

Answer

Encryption at rest protects stored data so it is unreadable to unauthorized parties even if the storage device is stolen.

Question 5

Which of the following is the BEST description of a 'social engineering' attack?

Accepted Answer

Manipulating people into revealing confidential information or performing actions

Answer

Social engineering exploits human psychology rather than technical vulnerabilities to gain unauthorized access or information.

(CRT) Certified Retail Tobacconist Practice Test