CTP CTP Security & Risk Management 2

Question 1

Which network security control inspects traffic at the application layer (Layer 7) to detect and block sophisticated attacks?

Accepted Answer

Web Application Firewall (WAF)

Answer

A WAF operates at Layer 7, inspecting HTTP/S traffic to detect and block application-layer attacks such as SQL injection and XSS.

Question 2

What is the difference between vulnerability scanning and vulnerability assessment?

Accepted Answer

Scanning identifies potential vulnerabilities automatically; assessment includes manual analysis and business context

Answer

Scanning uses automated tools to detect known vulnerabilities, while a full assessment adds manual validation, risk context, and remediation recommendations.

Question 3

In the context of risk management frameworks, what does NIST SP 800-30 provide?

Accepted Answer

A guide for conducting risk assessments of federal information systems

Answer

NIST SP 800-30 provides a structured methodology for conducting information security risk assessments for federal and enterprise systems.

Question 4

What security control does multi-factor authentication (MFA) primarily address?

Accepted Answer

It reduces the risk of unauthorized access due to compromised credentials

Answer

MFA requires multiple verification factors, so stolen passwords alone are insufficient for attackers to gain unauthorized system access.

Question 5

What is the purpose of a Security Information and Event Management (SIEM) system?

Accepted Answer

To aggregate, correlate, and analyze security logs from multiple sources for threat detection

Answer

A SIEM collects and correlates security events from across the environment in real time, enabling rapid detection of and response to security incidents.

CTP - Certified Technical Professional Practice Test

CTP - Certified Technical Professional Practice Test

CTP CTP Security & Risk Management 2