Question 1

The process by which organizations assess the data they hold and the level of protection it should be given based on its risk to loss or harm from disclosure is called

Options :

A : Information Classification

B : Information shielding

C : Security Category

D : Information Categorization

Answer: A

Question 2

The act of acquiring permission to gather, manage, use or disclose personal data is called ____________

Options :

A : Data minimization.

B : Privacy policy

C : Consent

D : Notice

Answer: C

Question 3

The act of analyzing a software system for vulnerabilities, examining potential threats associated with those vulnerabilities, and evaluating the resulting security risks is called _________

Options :

A : Controls or Countermeasure

B : Cyber threat

C : Threat Risk Assessment

D : Vulnerability

Answer: C

Question 4

A vulnerability that is unknown to those who would be interested in mitigating it is called _________

Options :

A : Trojan

B : Hotpot

C : Zero day

D : Sandboxing

Answer: C

Question 5

A process by which potential threats is identified, enumerated, and prioritized from a hypothetical attacker’s point is called?

Options :

A : Vulnerability

B : Threat modeling

C : Threat risk assessment

D : Cyber threat

Answer: B

Higher Test Marks with Free Online IIBA-CCA Exam Practice

Buying Options: