IIBA-CCA Practice Questions

A.  

Breach

B.  

Phishing

C.  

Threat

D.  

Ransomware

A.  

Vulnerability-as-a-Service

B.  

Penetration Test

C.  

Security Patch

D.  

Smoke Test

A.  

Principle of Least Privilege

B.  

Biometric Verification

C.  

Anti-Malicious Code Detection

D.  

Backups and Redundancy

A.  

A review of security-related measures in place intended to identify possible vulnerabilities

B.  

A process that the cybersecurity follows to ensure that they have implemented the proper controls

C.  

A review of security expenditures by an independent party

D.  

A review of security-related activities by an independent party to ensure compliance

A.  

Reducing the risk by implementing one or more countermeasures

B.  

Purchasing insurance against a cybersecurity breach

C.  

Eliminating the risk by stopping the activity which causes risk

D.  

Documenting the risk in full and preparing a recovery plan

A.  

independent audits of systems and security procedures.

B.  

review of security requirements by senior executives and/or the Board.

C.  

extensive QA testing prior to system implementation.

D.  

penetration testing by ethical hackers.

A.  

Organizational Risk Tolerance

B.  

Impact Severity

C.  

Application Vulnerabilities

D.  

Threat Likelihood

A.  

software as a service (SaaS).

B.  

threat risk assessment (TRA).

C.  

security information and event management system (SIEM).

D.  

cloud access security broker (CASB).

A.  

To ensure the future state business processes are included in user training

B.  

To identify potential security impacts to integrated systems within the value chain

C.  

To identify and meet internal security governance requirements

D.  

To classify the data elements so that information confidentiality, integrity, and availability are protected

A.  

only initial reviews.

B.  

technology or process solutions.

C.  

partial coverage of one or more risks.

D.  

coverage for partial extent and scope of the risk.