Certificate in Cybersecurity Analysis - IIBA-CCA Exam Practice Test

Question 1

What should organizations do with Key Risk Indicator KRI and Key Performance Indicator KPI data to facilitate decision making, and improve performance and accountability?

A. Prioritize, falsify, and report

B. Challenge, compare, and revise

C. Collect, analyze, and report

D. Achieve, reset, and evaluate

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 2

Which of the following should be addressed by functional security requirements?

A. User privileges

B. Performance and stability

C. System reliability

D. Identified vulnerabilities

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 3

What is an external audit?

A. A review of security-related measures in place intended to identify possible vulnerabilities

B. A review of security expenditures by an independent party

C. A review of security-related activities by an independent party to ensure compliance

D. A process that the cybersecurity follows to ensure that they have implemented the proper controls

Correct Answer: C

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 4

What risk factors should the analyst consider when assessing the Overall Likelihood of a threat?

A. Risk Level, Risk Impact, and Mitigation Strategy

B. Attack Initiation Likelihood and Initiated Attack Success Likelihood

C. Past Experience and Trends

D. Overall Site Traffic and Commerce Volume

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 5

Why would a Business Analyst include current technology when documenting the current state business processes surrounding a solution being replaced?

A. To ensure the future state business processes are included in user training

B. To identify potential security impacts to integrated systems within the value chain

C. To identify and meet internal security governance requirements

D. To classify the data elements so that information confidentiality, integrity, and availability are protected

Correct Answer: B

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 6

Information classification of data is a level of protection that is based on an organization's:

A. risk to loss or harm from disclosure.

B. retention for auditing purposes.

C. timing of availability for automated systems.

D. need for access by employees.

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 7

Which of the following factors is most important in determining the classification of personal information?

A. Accessibility

B. Availability

C. Integrity

D. Confidentiality

Correct Answer: D

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

Question 8

Where business process diagrams can be used to identify vulnerabilities within solution processes, what tool can be used to identify vulnerabilities within solution technology?

A. Penetration Test

B. Vulnerability-as-a-Service

C. Security Patch

D. Smoke Test

Correct Answer: A

Explanation: Only visible for Actualtests4sure members. You can sign-up / login (it's free).

IIBA Certificate in Cybersecurity Analysis - IIBA-CCA Exam Practice Test

Latest Update

Useful Links

Contact Us