IIBA-CCA Certificate in Cybersecurity Analysis Exam Preparation Resources

dumps2026-03-11T09:12:01+08:00

IIBA-CCA Certificate in Cybersecurity Analysis (CCA) exam is available for you to take. There are 75 multiple-choice, knowledge-based questions in real IIBA-CCA exam, and you have 90 minutes to answer all the questions. The required passing score is 70%. We provide the latest Certificate in Cybersecurity Analysis (CCA) IIBA-CCA exam preparation resources, which are useful for you to take the test. Free Certificate in Cybersecurity Analysis (CCA) IIBA-CCA exam preparation resources are available below.

Page 1 of 3

1. There are three states in which data can exist:

at dead, in action, in use.

at dormant, in mobile, in use.

at sleep, in awake, in use.

at rest, in transit, in use.

2. Violations of the EU’s General Data Protection Regulations GDPR can result in:

mandatory upgrades of the security infrastructure.

fines of 20 million or 4% of annual turnover, whichever is less.

fines of 20 million or 4% of annual turnover, whichever is greater.

a complete audit of the enterprise’s security processes.

3. What privacy legislation governs the use of healthcare data in the United States?

Privacy Act

PIPEDA

HIPAA

PCI-DSS

4. Which of the following should be addressed by functional security requirements?

System reliability

User privileges

Identified vulnerabilities

Performance and stability

5. Which of the following terms represents an accidental exploitation of a vulnerability?

Threat

Agent

Event

Response

6. The main phases of incident management are:

awareness, interest, desire, action.

reporting, investigation, assessment, corrective actions, review.

initiation, planning, action, closing.

assess, investigate, report, respond, legal compliance.

7. Why is directory management important for cybersecurity?

It prevents outside agents from viewing confidential company information

It allows all application security to be managed through a single interface

It prevents outsiders from knowing personal information about employees

It controls access to folders and files on the network

8. How is a risk score calculated?

Based on the confidentiality, integrity, and availability characteristics of the system

Based on the combination of probability and impact

Based on past experience regarding the risk

Based on an assessment of threats by the cyber security team

9. What is a Recovery Point Objective RPO?

The point in time prior to the outage to which business and process data must be recovered

The maximum time a system may be out of service before a significant business impact occurs

The target time to restore a system without experiencing any significant business impact

The target time to restore systems to operational status following an outage

10. What is risk mitigation?

Reducing the risk by implementing one or more countermeasures

Purchasing insurance against a cybersecurity breach

Eliminating the risk by stopping the activity which causes risk

Documenting the risk in full and preparing a recovery plan

Page 2 of 3

11. SSL/TLS encryption capability is provided by:

certificates.

protocols.

passwords.

controls.

12. Which scenario is an example of the principle of least privilege being followed?

An application administrator has full permissions to only the applications they support

All application and database administrators have full permissions to every application in the company

Certain users are granted administrative access to their network account, in case they need to install a web-app

A manager who is conducting performance appraisals is granted access to HR files for all employees

13. Which capability would a solution option need to demonstrate in order to satisfy Logging Requirements?

Facilitates Single Sign-On

Records information about user access and actions in the system

Integrates with Risk Logging software

Offers both on-premise and as-a-service delivery options

14. ITIL Information Technology Infrastructure Library defines:

a standard of best practices for IT Service Management.

how technology and hardware systems interface securely with one another.

the standard set of components used in every business technology system.

a set of security requirements that every business technology system must meet.

15. What is an embedded system?

A system that is located in a secure underground facility

A system placed in a location and designed so it cannot be easily removed

It provides computing services in a small form factor with limited processing power

It safeguards the cryptographic infrastructure by storing keys inside a tamper-resistant external device

16. What business analysis deliverable would be an essential input when designing an audit log report?

Access Control Requirements

Risk Log

Future State Business Process

Internal Audit Report

17. A significant benefit of role-based access is that it:

simplifies the assignment of correct access levels to a user based on the work they will perform.

makes it easier to audit and verify data access.

ensures that employee accounts will be shut down on departure or role change.

ensures that tasks and associated privileges for a specific business process are disseminated among multiple users.

18. Which of the following should be addressed in the organization's risk management strategy?

Acceptable risk management methodologies

Controls for each IT asset

Processes for responding to a security breach

Assignment of an executive responsible for risk management across the organization

19. Where SaaS is the delivery of a software service, what service does PaaS provide?

Load Balancers

Storage

Subscriptions

Operating System

20. What terms are often used to describe the relationship between a sub-directory and the directory in which it is cataloged?

Primary and Secondary

Multi-factor Tokens

Parent and Child

Embedded Layers

Page 3 of 3

21. Cybersecurity regulations typically require that enterprises demonstrate that they can protect:

applications and technology systems.

trade secrets and other intellectual property.

personal data of customers and employees.

business continuity and disaster recovery.

22. If a Business Analyst is asked to document the current state of the organization's web-based business environment, and recommend where cost savings could be realized, what risk factor must be included in the analysis?

Organizational Risk Tolerance

Impact Severity

Application Vulnerabilities

Threat Likelihood

23. NIST 800-30 defines cyber risk as a function of the likelihood of a given threat-source exercising a potential vulnerability, and:

the pre-disposing conditions of the vulnerability.

the probability of detecting damage to the infrastructure.

the effectiveness of the control assurance framework.

the resulting impact of that adverse event on the organization.

IIBA-CCA Certificate in Cybersecurity Analysis Exam Preparation Resources

IIBA-CCA Certificate in Cybersecurity Analysis Exam Preparation Resources

Share this post

Leave a Reply Cancel reply

Related Posts

Certification in Business Data Analytics CBDA Exam Free Dumps

CBAP Certified Business Analysis Professional Exam Updated Questions

Good IIBA CCBA Questions and Answers