Online Access Free CTPRP Practice Test

Which document primarily guides the restoration of IT services after a disaster?

• A.The disaster recovery plan
• B.Business continuity plan
• C.Information security policy
• D.Operational level agreement

What is the deadline for data controllers under GDPR to notify the supervisory authority after becoming aware of a personal data breach?

• A.Within 72 hours of becoming aware of the breach.
• B.Within 30 days of receiving confirmation from a cybersecurity expert.
• C.Within 24 hours of data breach detection.
• D.At the end of the financial year in which the breach occurred.

Which of the following would most likely require a reassessment of a vendor?

• A.A significant change in the vendor's scope of work
• B.A minor amendment to the service agreement with the vendor
• C.The vendor's decision to relocate its primary data centers
• D.Updating the vendor's technological infrastructure

Why are SLA metrics not typically included in external continuous monitoring solutions?

• A.They are less detailed and too infrequent to be useful in continuous monitoring.
• B.They are typically handled directly by the vendors as part of their internal controls.
• C.They are more relevant for internal monitoring and reporting by the vendor or a third-party auditor.
• D.They often do not align with the specific criteria and frequency agreed upon by the parties.

If a company identifies significant financial risk with a third-party vendor, what is an appropriate initial action?

• A.Negotiate lower prices to reflect the increased risk before continuing transactions.
• B.Encourage the vendor to restructure their debt to improve financial stability.
• C.Conduct a more detailed financial audit of the vendor to assess long-term viability.
• D.Immediately cease all business activities with the vendor to prevent potential losses.