APRP Questions with answers
Preventive Control - CORRECT ANSWERS ✔✔A mitigating
technique designated to prevent an event from occurring.
Incident Response Plan - CORRECT ANSWERS ✔✔A plan
that defines the action steps, involved resources and
communication strategy upon identification of a threat or
potential threat event, such as a breach in security
protocol, power or telecomunnications outage, severe
weather or workplace violence.
Control Self-Assessment - CORRECT ANSWERS ✔✔A
technique used to internally assess the effectiveness of
risk management and control processes.
Business Continuity Strategy - CORRECT ANSWERS
✔✔Comprehensive strategies to recover, resume and
maintain all critical business functions.
Technical Controls - CORRECT ANSWERS ✔✔Controls to
prevent and detect unauthorized activity.
,Procedures - CORRECT ANSWERS ✔✔Defines the manner
in which an organization will proceed, perform or affect
something to accomplish the objectives of a policy.
Title 31 of the Code of Federal Regulation (CFR) Part 370 -
CORRECT ANSWERS ✔✔Governs the handling of
payments for the Bureau of Public Debt made through the
ACH Network.
Unfair, Deceptive or Abusive Acts or Practices (UDAAP) -
CORRECT ANSWERS ✔✔Law to protect consumers
purchasing financial products and services requiring that
consumers have access to information that lets them
choose the option they believe is best for their situation.
Risk Evaluation - CORRECT ANSWERS ✔✔Process of
comparing risk analysis results to determine if risk is at
an acceptable level.
Business Impact Analysis (BIA) - CORRECT ANSWERS
✔✔Process of identifying the potential impact of
uncontrolled, non-specific events on an institution's
business processes.
Enterprise Risk Management - CORRECT ANSWERS
✔✔Process of planning, organizing, leading and
, controlling the activities of an organization to minimize
the effects of risk on that organization.
Risk Measurement - CORRECT ANSWERS ✔✔Process to
determine the likelihood of an adverse event or threat
occurring and the potential impact of such an event on
the institution.
User Access Controls - CORRECT ANSWERS ✔✔Security
technique used to regulate who or what can view or use
resources in a computing environment.
Vulnerability Assessment - CORRECT ANSWERS
✔✔Systematic examination of systems to identify,
quantify and prioritize the security deficiencies of the
systems.
Function Drill/Parallel Test - CORRECT ANSWERS
✔✔Testing method involves actual mobilization of
personnel to other sites attempting to establish
communications and perform actual recovery processing
as outlined in the business continuity plan (BCP).
Risk Management - CORRECT ANSWERS ✔✔Total process
required to identify, control and minimize the impact of
uncertain events.
Preventive Control - CORRECT ANSWERS ✔✔A mitigating
technique designated to prevent an event from occurring.
Incident Response Plan - CORRECT ANSWERS ✔✔A plan
that defines the action steps, involved resources and
communication strategy upon identification of a threat or
potential threat event, such as a breach in security
protocol, power or telecomunnications outage, severe
weather or workplace violence.
Control Self-Assessment - CORRECT ANSWERS ✔✔A
technique used to internally assess the effectiveness of
risk management and control processes.
Business Continuity Strategy - CORRECT ANSWERS
✔✔Comprehensive strategies to recover, resume and
maintain all critical business functions.
Technical Controls - CORRECT ANSWERS ✔✔Controls to
prevent and detect unauthorized activity.
,Procedures - CORRECT ANSWERS ✔✔Defines the manner
in which an organization will proceed, perform or affect
something to accomplish the objectives of a policy.
Title 31 of the Code of Federal Regulation (CFR) Part 370 -
CORRECT ANSWERS ✔✔Governs the handling of
payments for the Bureau of Public Debt made through the
ACH Network.
Unfair, Deceptive or Abusive Acts or Practices (UDAAP) -
CORRECT ANSWERS ✔✔Law to protect consumers
purchasing financial products and services requiring that
consumers have access to information that lets them
choose the option they believe is best for their situation.
Risk Evaluation - CORRECT ANSWERS ✔✔Process of
comparing risk analysis results to determine if risk is at
an acceptable level.
Business Impact Analysis (BIA) - CORRECT ANSWERS
✔✔Process of identifying the potential impact of
uncontrolled, non-specific events on an institution's
business processes.
Enterprise Risk Management - CORRECT ANSWERS
✔✔Process of planning, organizing, leading and
, controlling the activities of an organization to minimize
the effects of risk on that organization.
Risk Measurement - CORRECT ANSWERS ✔✔Process to
determine the likelihood of an adverse event or threat
occurring and the potential impact of such an event on
the institution.
User Access Controls - CORRECT ANSWERS ✔✔Security
technique used to regulate who or what can view or use
resources in a computing environment.
Vulnerability Assessment - CORRECT ANSWERS
✔✔Systematic examination of systems to identify,
quantify and prioritize the security deficiencies of the
systems.
Function Drill/Parallel Test - CORRECT ANSWERS
✔✔Testing method involves actual mobilization of
personnel to other sites attempting to establish
communications and perform actual recovery processing
as outlined in the business continuity plan (BCP).
Risk Management - CORRECT ANSWERS ✔✔Total process
required to identify, control and minimize the impact of
uncertain events.
