CCA Cybersecurity Practices & Controls

Question 1

What is the primary function of multi-factor authentication (MFA)?

Accepted Answer

Require multiple forms of identity verification

Answer

MFA adds an additional layer of security by requiring two or more verification factors to access systems.

Question 2

Which control addresses system access by former employees?

Accepted Answer

Credential revocation upon termination

Answer

Revoking user credentials promptly is a key access control measure that prevents unauthorized access by former personnel.

Question 3

Which of the following is a basic preventive security control?

Accepted Answer

Firewall implementation

Answer

Firewalls act as a first line of defense by filtering incoming and outgoing network traffic.

Question 4

What does the principle of least privilege mean?

Accepted Answer

Minimal necessary access

Answer

Users are given only the access necessary to perform their job duties, reducing the risk of accidental or malicious misuse.

Question 5

Which CMMC domain covers regular system monitoring and scanning?

Accepted Answer

System and Information Integrity (SI)

Answer

System and Information Integrity (SI) includes controls for malware scanning, system alerts, and vulnerability monitoring.

(CCA) Certified Cybersecurity Maturity Model Certification Assessor Practice Test