Risk by Domain CCOA Practice Questions (Page 6)

Questions 26–30

1. 26application · medium

   A hospital's patient records system runs on an older operating system that is no longer supported by the vendor. The system is isolated on a separate network segment, but a recent audit found that a few workstations on that segment are missing critical security patches. Which risk factor is MOST directly increasing the likelihood of a successful attack on the patient records system?

   • ASupply chain dependency
   • BInsecure network protocols
   • CUnpatched software on endpoints
   • DData integrity risk
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   An e-commerce company stores customer order data in a database. The database is backed up nightly, but the backups are stored in the same physical location as the primary database. A fire destroys the data center. Which data risk is MOST directly increased by this backup strategy?

   • AIntegrity risk
   • BSupply chain risk
   • CConfidentiality risk
   • DAvailability risk
   Reveal Solution Discussion Select an answer first
4. 28application · medium

   A software development team uses an open-source component that is widely used across the industry. The team does not track the version of the component they use. A critical vulnerability is disclosed in the component, and the team is unsure if they are affected. Which application risk source is MOST directly highlighted by this situation?

   • AData exposure
   • BBroken authentication
   • CLack of software inventory and provenance
   • DInsecure API
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which data risk type is most directly concerned with preventing unauthorized modification of data?

   • AIntegrity
   • BConfidentiality
   • CAvailability
   • DNon-repudiation
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   Which of the following best defines application risk in the context of cybersecurity?

   • AThe likelihood that a software application will be exploited due to a vulnerability, potentially leading to unauthorized access or data loss.
   • BThe risk that a cloud provider will fail to meet its service-level agreement.
   • CThe risk that an employee will accidentally delete critical data from a database.
   • DThe risk that an organization's network perimeter will be breached by an external attacker.
   Reveal Solution Discussion Select an answer first