IIBA IIBA-CCA인증시험은 전업적지식이 강한 인증입니다. IT업계에서 일자리를 찾고 계시다면 많은 회사에서는IIBA IIBA-CCA있는지 없는지에 알고 싶어합니다. 만약IIBA IIBA-CCA자격증이 있으시다면 여러분은 당연히 경쟁력향상입니다.
| Certification Vendor: | IIBA |
|---|---|
| Exam Name: | IIBA Certificate in Cybersecurity Analysis |
| Exam Number: | IIBA-CCA |
| Exam Duration: | 120 minutes |
| Available Languages: | English |
| Related Certifications: | IIBA Certification |
| Real Exam Qty: | 100 |
| Passing Score: | 70% |
| Exam Price: | $450 USD |
| Exam Format: | Multiple Choice |
| Certificate Validity Period: | No expiration |
| Sample Questions: | IIBA IIBA-CCA Sample Questions |
| Exam Way: | Online proctored or Test Center |
| Pre Condition: | No specific prerequisites, but experience in business analysis or cybersecurity is recommended. |
| Official Syllabus URL: | https://www.iiba.org/career-resources/a-business-analysis-professionals-foundation-for-success/certificate-in-cybersecurity-analysis/ |
PassTIP의 IIBA인증 IIBA-CCA시험덤프는 고객님의 IT자격증을 취득하는 꿈을 실현시켜 드리는 시험패스의 지름길입니다. IIBA인증 IIBA-CCA덤프에는 실제시험문제의 거의 모든 문제를 적중하고 습니다. PassTIP의 IIBA인증 IIBA-CCA덤프가 있으면 시험패스가 한결 간편해집니다.
| 주제 | 소개 |
|---|---|
| 주제 1 |
|
| 주제 2 |
|
| 주제 3 |
|
질문 # 68
An internet-based organization whose address is not known has attempted to acquire personal identification details such as usernames and passwords by creating a fake website. This is an example of?
정답：B
설명：
Creating a fake website to trick individuals into entering usernames and passwords is a classic example of phishing. Phishing is a social engineering technique where an attacker impersonates a trusted entity to deceive a victim into disclosing sensitive information (credentials, personal data, payment details) or taking an action that benefits the attacker (downloading malware, approving an MFA prompt, wiring funds). A counterfeit login page is commonly used in credential-harvesting campaigns: the victim believes they are authenticating to a legitimate service, but the credentials are captured by the attacker and later used for account takeover. This is not necessarily a breach yet because the question describes an attempt to acquire credentials; a breach would be confirmed unauthorized access or disclosure. While phishing is a kind of threat, "threat" is too broad compared to the specific described behavior. It is also not ransomware, which focuses on encrypting or locking data and demanding payment. Cybersecurity documentation emphasizes layered defenses against phishing: user awareness training, email and web filtering, domain and certificate validation, anti-spoofing controls, strong authentication (especially MFA resistant to prompt fatigue), password managers that reduce credential entry on lookalike domains, and monitoring for suspicious logins. Because the attack relies on deception through a fake website to steal credentials, the best match is phishing.
질문 # 69
Which of the following should be addressed by functional security requirements?
정답：C
설명：
Functional security requirements define what security capabilities a system must provide to protect information and enforce policy. They describe required security functions such as identification and authentication, authorization, role-based access control, privilege management, session handling, auditing/logging, segregation of duties, and account lifecycle processes. Because of this, user privileges are a direct and core concern of functional security requirements: the system must support controlling who can access what, under which conditions, and with what level of permission.
In cybersecurity requirement documentation, "privileges" include permission assignment (roles, groups, entitlements), enforcement of least privilege, privileged access restrictions, elevation workflows, administrative boundaries, and the ability to review and revoke permissions. These are functional because they require specific system behaviors and features-for example, the ability to define roles, prevent unauthorized actions, log privileged activities, and enforce timeouts or re-authentication for sensitive operations.
The other options are typically classified differently. System reliability and performance/stability are generally non-functional requirements (quality attributes) describing service levels, resilience, and operational characteristics rather than security functions. Identified vulnerabilities are findings from assessments that drive remediation work and risk treatment; they inform security improvements but are not themselves functional requirements. Therefore, the option best aligned with functional security requirements is user privileges.
질문 # 70
The main phases of incident management are:
정답：C
설명：
Incident management is a structured operational process used to ensure security issues are handled consistently, evidence is preserved, impact is reduced, and improvements are implemented to prevent recurrence. The phases listed in option B match how incident management is commonly documented in operational security programs.
Reporting is the entry point: users, monitoring tools, and service desks raise alerts or tickets, capturing what happened, when, and initial impact. Clear reporting channels and defined severity criteria ensure incidents are escalated quickly and handled by the right teams. Investigation follows, focusing on fact-finding and evidence collection such as logs, endpoint telemetry, network traces, and user statements. Assessment determines scope, business impact, affected assets and data, and the likelihood of continuing compromise. This step drives prioritization and selects the appropriate handling path.
Corrective actions implement containment, eradication, and recovery activities, such as isolating hosts, disabling compromised accounts, applying patches, rotating credentials, restoring from backups, and validating system integrity. Corrective actions also include communications, documentation, and coordination with legal, privacy, and business stakeholders when required. Finally, review is the lessons-learned phase that updates playbooks, improves detections, closes control gaps, and ensures root causes are addressed through durable fixes rather than temporary workarounds.
The other options do not represent standard incident management phases: A is a marketing model, while C and D are incomplete or mis-ordered compared to established incident management lifecycle documentation.
질문 # 71
Which of the following terms represents an accidental exploitation of a vulnerability?
정답：B
설명：
In cybersecurity risk terminology, an event is an observable occurrence that can affect systems, services, or data. An event may be benign, harmful, intentional, or accidental. When a vulnerability is exploited accidentally-for example, a user unintentionally triggers a software flaw, a misconfiguration causes unintended exposure, or a system process mishandles input and causes data corruption-the occurrence is best categorized as an event. Cybersecurity documentation often distinguishes between the possibility of harm and the actual occurrence of a harmful condition. A threat is the potential for an unwanted incident, such as an actor or circumstance that could exploit a vulnerability. A threat does not require that exploitation actually happens; it describes risk potential. An agent is the entity that acts (such as a person, malware, or process) and may be malicious or non-malicious, but "agent" is not the term for the occurrence itself. A response refers to the actions taken after detection, such as containment, eradication, recovery, and lessons learned; it is part of incident handling, not the accidental exploitation.
Therefore, the term that represents the actual accidental exploitation occurrence is event, because it captures the real-world happening that may trigger alerts, investigations, and potentially incident response activities if impact is significant.
질문 # 72
ITIL Information Technology Infrastructure Library defines:
정답：A
설명：
ITIL is a widely adopted framework that defines best-practice guidance for IT Service Management. Its focus is on how organizations design, deliver, operate, and continually improve IT services so they reliably support business outcomes. In cybersecurity and service delivery documentation, ITIL is often referenced because strong service management processes are foundational to secure operations. For example, ITIL practices such as incident management, problem management, change enablement, configuration management, and service continuity help ensure security controls are implemented consistently and that deviations are identified, tracked, and corrected.
ITIL does not define how hardware systems interface securely with one another; that is more aligned with architecture standards, security engineering, and network or platform design frameworks. It also does not prescribe a universal set of components for every technology system; that belongs to reference architectures and enterprise architecture standards. Likewise, ITIL is not primarily a security requirements standard. While ITIL supports security governance through practices like risk management, access management, and information security management integration, it does not itself serve as a mandatory security control catalog.
From a cybersecurity perspective, ITIL contributes by promoting repeatable processes, clear roles and responsibilities, measurable service levels, and continual improvement. These elements reduce operational risk, improve response effectiveness, and strengthen accountability-key requirements for maintaining confidentiality, integrity, and availability in production environments.
질문 # 73
......
IIBA-CCA높은 통과율 덤프데모문제: https://www.passtip.net/IIBA-CCA-pass-exam.html