CCA Cybersecurity Practices & Controls

Question 1

What is the primary function of multi-factor authentication (MFA)?

Accepted Answer

Require multiple forms of identity verification

Answer

Replace passwords

Answer

Allow password reuse

Answer

Restrict file downloads

Question 2

Which control addresses system access by former employees?

Accepted Answer

Credential revocation upon termination

Answer

Data encryption

Answer

Antivirus scanning

Answer

Firewall installation

Question 3

Which of the following is a basic preventive security control?

Accepted Answer

Firewall implementation

Answer

Audit logging

Answer

Post-incident review

Answer

Backup restoration

Question 4

What does the principle of least privilege mean?

Accepted Answer

Minimal necessary access

Answer

Full access to all systems

Answer

No access without approval

Answer

Default administrative access

Question 5

Which CMMC domain covers regular system monitoring and scanning?

Accepted Answer

System and Information Integrity (SI)

Answer

Incident Response (IR)

Answer

Access Control (AC)

Answer

Configuration Management (CM)

Question 6

Which practice supports secure communications?

Accepted Answer

Encrypting data in transit

Answer

Using public Wi-Fi

Answer

Saving passwords in browser

Answer

Disabling firewalls