CCA Cybersecurity Practices & Controls 1 — Questions and Answers
Question 1: What is the primary function of multi-factor authentication (MFA)?
- Replace passwords
- Allow password reuse
- Require multiple forms of identity verification (Correct answer)
- Restrict file downloads
Correct answer: Require multiple forms of identity verification
MFA adds an additional layer of security by requiring two or more verification factors to access systems.
Question 2: Which control addresses system access by former employees?
- Data encryption
- Antivirus scanning
- Credential revocation upon termination (Correct answer)
- Firewall installation
Correct answer: Credential revocation upon termination
Revoking user credentials promptly is a key access control measure that prevents unauthorized access by former personnel.
Question 3: Which of the following is a basic preventive security control?
- Firewall implementation (Correct answer)
- Audit logging
- Post-incident review
- Backup restoration
Correct answer: Firewall implementation
Firewalls act as a first line of defense by filtering incoming and outgoing network traffic.
Question 4: What does the principle of least privilege mean?
- Full access to all systems
- No access without approval
- Minimal necessary access (Correct answer)
- Default administrative access
Correct answer: Minimal necessary access
Users are given only the access necessary to perform their job duties, reducing the risk of accidental or malicious misuse.
Question 5: Which CMMC domain covers regular system monitoring and scanning?
- Incident Response (IR)
- Access Control (AC)
- System and Information Integrity (SI) (Correct answer)
- Configuration Management (CM)
Correct answer: System and Information Integrity (SI)
System and Information Integrity (SI) includes controls for malware scanning, system alerts, and vulnerability monitoring.
Question 6: Which practice supports secure communications?
- Using public Wi-Fi
- Saving passwords in browser
- Encrypting data in transit (Correct answer)
- Disabling firewalls
Correct answer: Encrypting data in transit
Using encryption for data in transit protects it from interception during network transmission.
CCA Cybersecurity Practices & Controls 1
What is the primary function of multi-factor authentication (MFA)?