Cybersecurity Governance CCOA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which role is primarily responsible for setting the overall cybersecurity strategy and ensuring it aligns with business goals?

   • ANetwork Administrator
   • BChief Information Security Officer (CISO)
   • CSecurity Analyst
   • DIT Support Technician
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is a common method for documenting cybersecurity responsibilities?

   • AA firewall rule set that defines allowed traffic.
   • BAn incident response playbook that lists steps to respond to a specific type of incident.
   • CA RACI matrix that maps tasks to roles as Responsible, Accountable, Consulted, or Informed.
   • DA network diagram that shows the physical layout of the infrastructure.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which of the following is an example of a governance oversight mechanism?

   • AA password manager that stores credentials securely.
   • BA firewall that blocks unauthorized network traffic.
   • CAn antivirus software that scans for malware.
   • DA board-level cybersecurity committee that reviews security metrics and incident reports.
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary role of a compliance audit in an organization?

   • ATo respond to active security incidents and contain threats.
   • BTo verify that the organization's security controls and processes align with established policies, standards, and regulatory requirements.
   • CTo replace the need for continuous monitoring by providing a one-time review.
   • DTo design new security controls and implement them across the organization.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   Which of the following best describes the outcome of a compliance audit?

   • AA new set of security policies that the organization must adopt.
   • BA guarantee that the organization will not experience a security breach.
   • CA report that identifies areas of non-compliance and provides recommendations for remediation.
   • DA real-time alerting system for detecting intrusions.
   Reveal Solution Discussion Select an answer first