Question 1

___________ type of control that specify acceptable rules of behavior within an organization.

Options :

A : Directive Controls

B : Deterrent Controls

C : Corrective Controls

D : Detective Controls

Answer: A

Question 2

A function of the likelihood of a given threat-source exercising a potential vulnerability, and the resulting impact of that adverse event on the organization is referred to as _____

Options :

A : Risk management framework

B : Risk Management

C : Risk appetite

D : Risk

Answer: D

Question 3

A manual encryption of specific files where the user must initiate an action before the file is encrypted and stored.

Options :

A : Encryption

B : Endpoint

C : File Level Encryption

D : Full Disk Encryption

Answer: C

Question 4

A set of access control rules defined in firewalls, which control which traffic is permitted through and which must be blocked is called __________

Options :

A : Rule Set

B : Network Based Firewall

C : Ingress Traffic

D : Host Based Firewall

Answer: A

Question 5

A process by which potential threats is identified, enumerated, and prioritized from a hypothetical attacker’s point is called?

Options :

A : Vulnerability

B : Threat modeling

C : Threat risk assessment

D : Cyber threat

Answer: B

Free IIBA-CCA Mock Exam – Practice Online Confidently

Buying Options: