Exactprep CC Questions

Risk acceptance acknowledges the risk and chooses to proceed without additional controls, often due to cost or low impact.

An Incident Response Plan (IRP) defines procedures for managing and mitigating security incidents.

Honeytokens are decoy data elements designed to lure attackers and detect unauthorized access. Examples include fake credentials, files, or database entries that have no legitimate use.

When a honeytoken is accessed, it triggers an alert, indicating a compromise. Honeytokens are valuable for detecting insider threats and lateral movement.

They do not encrypt data, improve performance, or manage access. Honeytokens are part of deception-based security strategies that enhance detection capabilities.

A Business Continuity Plan is enacted when an organization experiences aloss or disruption of critical business operations. The goal of BCP is to ensure that essential business functions continue or are quickly restored, regardless of the cause of the disruption.

While events, incidents, or natural disasters may trigger disruptions, BCP activation is based onimpact to operations, not the type of event itself. BCP focuses on people, processes, facilities, and third parties—not just IT systems.