CTP CTP Security & Risk Management

Question 1

Which security principle dictates that users and systems should only be granted the minimum level of access required to perform their job functions?

Accepted Answer

Principle of least privilege

Answer

The principle of least privilege minimizes the attack surface by restricting access rights to only those necessary for legitimate work.

Question 2

In risk management, what does the formula Risk = Likelihood × Impact represent?

Accepted Answer

A qualitative method to prioritize risks by combining their probability and consequence

Answer

Multiplying likelihood by impact produces a risk score that allows teams to rank and prioritize risks for mitigation efforts.

Question 3

What is the purpose of a penetration test in a technical security program?

Accepted Answer

To simulate real-world attacks to identify exploitable vulnerabilities before malicious actors do

Answer

Penetration testing proactively identifies security weaknesses by simulating attacker techniques in a controlled, authorized environment.

Question 4

Which cryptographic concept ensures that a sender cannot later deny having sent a message?

Accepted Answer

Non-repudiation

Answer

Non-repudiation, typically achieved through digital signatures, provides proof of origin so senders cannot deny having sent a message.

Question 5

A CTP professional is implementing a disaster recovery plan. What does RTO (Recovery Time Objective) define?

Accepted Answer

The maximum acceptable time to restore a system after a failure

Answer

RTO defines how quickly a system must be restored and operational after an outage to meet business continuity requirements.

CTP - Certified Technical Professional Practice Test