CCOA

CCOA practice questions, page 4 of 5, with answer review and explanations.

Question 16

An organization moving its payment card system into a separate location on its network for security reasons is an example of network:

  1. redundancy.
  2. encryption.
  3. segmentation.
  4. centricity.

Question 17

Which of the following is the MOST effective way to ensure an organization's management of supply chain risk remains consistent?

  1. Periodically confirming suppliers' contractual obligations are met
  2. Regularly meeting with suppliers to informally discuss issues
  3. Regularly seeking feedback from the procurement team regarding supplier responsiveness
  4. Periodically counting the number of incident tickets associated with supplier services

Question 18

Which of the following should be considered FIRST when determining how to protect an organization's information assets?

  1. The organization's risk reporting
  2. Results of vulnerability assessments
  3. The organization's business model
  4. A prioritized inventory of IT assets

Question 19

Which of the following is the MOST important component of the asset decommissioning process from a data risk perspective?

  1. Destruction of data on the assets
  2. Removing the monitoring of the assets
  3. Updating the asset status in the configuration management database (CMDB)
  4. Informing the data owner when decommissioning is complete

Question 20

An organization’s financial data was compromised and posted online. The forensics review confirms proper access rights and encryption of the database at the host site. A lack of which of the following controls MOST likely caused the exposure?

  1. Encryption of data in transit
  2. Properly configured firewall
  3. Multi-factor authentication (MFA)
  4. Continual backups