APRP Exam Questions With Correct Answers
Preventive |Control |- |CORRECT |ANSWER✔✔-A |mitigating |technique |designated |to |prevent |an |
event |from |occurring.
Incident |Response |Plan |- |CORRECT |ANSWER✔✔-A |plan |that |defines |the |action |steps, |involved |
resources |and |communication |strategy |upon |identification |of |a |threat |or |potential |threat |
event, |such |as |a |breach |in |security |protocol, |power |or |telecomunnications |outage, |severe |
weather |or |workplace |violence.
Control |Self-Assessment |- |CORRECT |ANSWER✔✔-A |technique |used |to |internally |assess |the |
effectiveness |of |risk |management |and |control |processes.
Business |Continuity |Strategy |- |CORRECT |ANSWER✔✔-Comprehensive |strategies |to |recover, |
resume |and |maintain |all |critical |business |functions.
Technical |Controls |- |CORRECT |ANSWER✔✔-Controls |to |prevent |and |detect |unauthorized |
activity.
Procedures |- |CORRECT |ANSWER✔✔-Defines |the |manner |in |which |an |organization |will |
proceed, |perform |or |affect |something |to |accomplish |the |objectives |of |a |policy.
Title |31 |of |the |Code |of |Federal |Regulation |(CFR) |Part |370 |- |CORRECT |ANSWER✔✔-Governs |the
|handling |of |payments |for |the |Bureau |of |Public |Debt |made |through |the |ACH |Network.
Unfair, |Deceptive |or |Abusive |Acts |or |Practices |(UDAAP) |- |CORRECT |ANSWER✔✔-Law |to |
protect |consumers |purchasing |financial |products |and |services |requiring |that |consumers |have |
access |to |information |that |lets |them |choose |the |option |they |believe |is |best |for |their |situation.
,Risk |Evaluation |- |CORRECT |ANSWER✔✔-Process |of |comparing |risk |analysis |results |to |
determine |if |risk |is |at |an |acceptable |level.
Business |Impact |Analysis |(BIA) |- |CORRECT |ANSWER✔✔-Process |of |identifying |the |potential |
impact |of |uncontrolled, |non-specific |events |on |an |institution's |business |processes.
Enterprise |Risk |Management |- |CORRECT |ANSWER✔✔-Process |of |planning, |organizing, |leading |
and |controlling |the |activities |of |an |organization |to |minimize |the |effects |of |risk |on |that |
organization.
Risk |Measurement |- |CORRECT |ANSWER✔✔-Process |to |determine |the |likelihood |of |an |adverse |
event |or |threat |occurring |and |the |potential |impact |of |such |an |event |on |the |institution.
User |Access |Controls |- |CORRECT |ANSWER✔✔-Security |technique |used |to |regulate |who |or |
what |can |view |or |use |resources |in |a |computing |environment.
Vulnerability |Assessment |- |CORRECT |ANSWER✔✔-Systematic |examination |of |systems |to |
identify, |quantify |and |prioritize |the |security |deficiencies |of |the |systems.
Function |Drill/Parallel |Test |- |CORRECT |ANSWER✔✔-Testing |method |involves |actual |
mobilization |of |personnel |to |other |sites |attempting |to |establish |communications |and |perform |
actual |recovery |processing |as |outlined |in |the |business |continuity |plan |(BCP).
Risk |Management |- |CORRECT |ANSWER✔✔-Total |process |required |to |identify, |control |and |
minimize |the |impact |of |uncertain |events.
Layered |Security |- |CORRECT |ANSWER✔✔-Use |of |different |controls |at |different |points |in |a |
transaction |process.
, Tabletop |Exercise/Structured |Walk-Through |Test |- |CORRECT |ANSWER✔✔-Testing |method |
ensures |critical |personnel |from |all |areas |are |familiar |with |the |business |continuity |plan |(BCP) |
and |may |be |used |as |an |effective |training |tool.
Walk-Through |Drill/Simulation |Test |- |CORRECT |ANSWER✔✔-Testing |method |used |to |apply |a |
specific |event |scenario |to |the |business |continuity |plan |(BCP).
Payroll |Card |Account |- |CORRECT |ANSWER✔✔-A |bank |account |established |directly |or |indirectly
|by |an |employer |on |behalf |of |an |employee |to |which |an |employee's |wages |are |electronically |
transferred |to.
Credit |Card |- |CORRECT |ANSWER✔✔-A |card |indicating |the |holder |has |been |granted |a |line |of |
credit |to |make |purchases |or |withdraw |cash |up |to |a |prearranged |ceiling.
Prepaid/Stored |Value |Card |- |CORRECT |ANSWER✔✔-A |card-based |payment |system |that |assigns
|a |value |to |the |card; |some |cards |can |be |"reloaded" |through |various |methods |and |others |are |
designed |to |be |discarded.
ECI |- |Electronically |Created |Item |- |CORRECT |ANSWER✔✔-A |check |that |never |appears |in |paper |
form.
Originator |- |CORRECT |ANSWER✔✔-A |company |or |individual |that |has |been |authorized |by |the |
Receiver |to |initiate |either |a |credit |or |debit |ACH |entry |to |their |account.
Business |Continuity |Plan |(BCP) |- |CORRECT |ANSWER✔✔-A |comprehensive |written |plan |to |
maintain |or |resume |business |in |the |event |of |a |disruption.
Encryption |- |CORRECT |ANSWER✔✔-A |data |security |technique |that |encodes |information |so |
that |data |appears |as |a |meaningless |string |of |letters |and |symbols |during |delivery |or |
transmission.
Preventive |Control |- |CORRECT |ANSWER✔✔-A |mitigating |technique |designated |to |prevent |an |
event |from |occurring.
Incident |Response |Plan |- |CORRECT |ANSWER✔✔-A |plan |that |defines |the |action |steps, |involved |
resources |and |communication |strategy |upon |identification |of |a |threat |or |potential |threat |
event, |such |as |a |breach |in |security |protocol, |power |or |telecomunnications |outage, |severe |
weather |or |workplace |violence.
Control |Self-Assessment |- |CORRECT |ANSWER✔✔-A |technique |used |to |internally |assess |the |
effectiveness |of |risk |management |and |control |processes.
Business |Continuity |Strategy |- |CORRECT |ANSWER✔✔-Comprehensive |strategies |to |recover, |
resume |and |maintain |all |critical |business |functions.
Technical |Controls |- |CORRECT |ANSWER✔✔-Controls |to |prevent |and |detect |unauthorized |
activity.
Procedures |- |CORRECT |ANSWER✔✔-Defines |the |manner |in |which |an |organization |will |
proceed, |perform |or |affect |something |to |accomplish |the |objectives |of |a |policy.
Title |31 |of |the |Code |of |Federal |Regulation |(CFR) |Part |370 |- |CORRECT |ANSWER✔✔-Governs |the
|handling |of |payments |for |the |Bureau |of |Public |Debt |made |through |the |ACH |Network.
Unfair, |Deceptive |or |Abusive |Acts |or |Practices |(UDAAP) |- |CORRECT |ANSWER✔✔-Law |to |
protect |consumers |purchasing |financial |products |and |services |requiring |that |consumers |have |
access |to |information |that |lets |them |choose |the |option |they |believe |is |best |for |their |situation.
,Risk |Evaluation |- |CORRECT |ANSWER✔✔-Process |of |comparing |risk |analysis |results |to |
determine |if |risk |is |at |an |acceptable |level.
Business |Impact |Analysis |(BIA) |- |CORRECT |ANSWER✔✔-Process |of |identifying |the |potential |
impact |of |uncontrolled, |non-specific |events |on |an |institution's |business |processes.
Enterprise |Risk |Management |- |CORRECT |ANSWER✔✔-Process |of |planning, |organizing, |leading |
and |controlling |the |activities |of |an |organization |to |minimize |the |effects |of |risk |on |that |
organization.
Risk |Measurement |- |CORRECT |ANSWER✔✔-Process |to |determine |the |likelihood |of |an |adverse |
event |or |threat |occurring |and |the |potential |impact |of |such |an |event |on |the |institution.
User |Access |Controls |- |CORRECT |ANSWER✔✔-Security |technique |used |to |regulate |who |or |
what |can |view |or |use |resources |in |a |computing |environment.
Vulnerability |Assessment |- |CORRECT |ANSWER✔✔-Systematic |examination |of |systems |to |
identify, |quantify |and |prioritize |the |security |deficiencies |of |the |systems.
Function |Drill/Parallel |Test |- |CORRECT |ANSWER✔✔-Testing |method |involves |actual |
mobilization |of |personnel |to |other |sites |attempting |to |establish |communications |and |perform |
actual |recovery |processing |as |outlined |in |the |business |continuity |plan |(BCP).
Risk |Management |- |CORRECT |ANSWER✔✔-Total |process |required |to |identify, |control |and |
minimize |the |impact |of |uncertain |events.
Layered |Security |- |CORRECT |ANSWER✔✔-Use |of |different |controls |at |different |points |in |a |
transaction |process.
, Tabletop |Exercise/Structured |Walk-Through |Test |- |CORRECT |ANSWER✔✔-Testing |method |
ensures |critical |personnel |from |all |areas |are |familiar |with |the |business |continuity |plan |(BCP) |
and |may |be |used |as |an |effective |training |tool.
Walk-Through |Drill/Simulation |Test |- |CORRECT |ANSWER✔✔-Testing |method |used |to |apply |a |
specific |event |scenario |to |the |business |continuity |plan |(BCP).
Payroll |Card |Account |- |CORRECT |ANSWER✔✔-A |bank |account |established |directly |or |indirectly
|by |an |employer |on |behalf |of |an |employee |to |which |an |employee's |wages |are |electronically |
transferred |to.
Credit |Card |- |CORRECT |ANSWER✔✔-A |card |indicating |the |holder |has |been |granted |a |line |of |
credit |to |make |purchases |or |withdraw |cash |up |to |a |prearranged |ceiling.
Prepaid/Stored |Value |Card |- |CORRECT |ANSWER✔✔-A |card-based |payment |system |that |assigns
|a |value |to |the |card; |some |cards |can |be |"reloaded" |through |various |methods |and |others |are |
designed |to |be |discarded.
ECI |- |Electronically |Created |Item |- |CORRECT |ANSWER✔✔-A |check |that |never |appears |in |paper |
form.
Originator |- |CORRECT |ANSWER✔✔-A |company |or |individual |that |has |been |authorized |by |the |
Receiver |to |initiate |either |a |credit |or |debit |ACH |entry |to |their |account.
Business |Continuity |Plan |(BCP) |- |CORRECT |ANSWER✔✔-A |comprehensive |written |plan |to |
maintain |or |resume |business |in |the |event |of |a |disruption.
Encryption |- |CORRECT |ANSWER✔✔-A |data |security |technique |that |encodes |information |so |
that |data |appears |as |a |meaningless |string |of |letters |and |symbols |during |delivery |or |
transmission.
