APRP 100 PERCENT CORRECT QUESTIONS AND ANSWERS
◉ Incident Response Plan . Answer: A plan that defines the action steps,
involved resources and communication strategy upon identification of a
threat or potential threat event, such as a breach in security protocol,
power or telecomunnications outage, severe weather or workplace
violence.
◉ Control Self-Assessment . Answer: A technique used to internally
assess the effectiveness of risk management and control processes.
◉ Business Continuity Strategy . Answer: Comprehensive strategies to
recover, resume and maintain all critical business functions.
◉ Technical Controls . Answer: Controls to prevent and detect
unauthorized activity.
◉ Procedures . Answer: Defines the manner in which an organization
will proceed, perform or affect something to accomplish the objectives
of a policy.
,◉ Title 31 of the Code of Federal Regulation (CFR) Part 370 . Answer:
Governs the handling of payments for the Bureau of Public Debt made
through the ACH Network.
◉ Unfair, Deceptive or Abusive Acts or Practices (UDAAP) . Answer:
Law to protect consumers purchasing financial products and services
requiring that consumers have access to information that lets them
choose the option they believe is best for their situation.
◉ Risk Evaluation . Answer: Process of comparing risk analysis results
to determine if risk is at an acceptable level.
◉ Business Impact Analysis (BIA) . Answer: Process of identifying the
potential impact of uncontrolled, non-specific events on an institution's
business processes.
◉ Enterprise Risk Management . Answer: Process of planning,
organizing, leading and controlling the activities of an organization to
minimize the effects of risk on that organization.
◉ Risk Measurement . Answer: Process to determine the likelihood of
an adverse event or threat occurring and the potential impact of such an
event on the institution.
, ◉ User Access Controls . Answer: Security technique used to regulate
who or what can view or use resources in a computing environment.
◉ Vulnerability Assessment . Answer: Systematic examination of
systems to identify, quantify and prioritize the security deficiencies of
the systems.
◉ Function Drill/Parallel Test . Answer: Testing method involves actual
mobilization of personnel to other sites attempting to establish
communications and perform actual recovery processing as outlined in
the business continuity plan (BCP).
◉ Risk Management . Answer: Total process required to identify,
control and minimize the impact of uncertain events.
◉ Layered Security . Answer: Use of different controls at different
points in a transaction process.
◉ Tabletop Exercise/Structured Walk-Through Test . Answer: Testing
method ensures critical personnel from all areas are familiar with the
business continuity plan (BCP) and may be used as an effective training
tool.
◉ Walk-Through Drill/Simulation Test . Answer: Testing method used
to apply a specific event scenario to the business continuity plan (BCP).
◉ Incident Response Plan . Answer: A plan that defines the action steps,
involved resources and communication strategy upon identification of a
threat or potential threat event, such as a breach in security protocol,
power or telecomunnications outage, severe weather or workplace
violence.
◉ Control Self-Assessment . Answer: A technique used to internally
assess the effectiveness of risk management and control processes.
◉ Business Continuity Strategy . Answer: Comprehensive strategies to
recover, resume and maintain all critical business functions.
◉ Technical Controls . Answer: Controls to prevent and detect
unauthorized activity.
◉ Procedures . Answer: Defines the manner in which an organization
will proceed, perform or affect something to accomplish the objectives
of a policy.
,◉ Title 31 of the Code of Federal Regulation (CFR) Part 370 . Answer:
Governs the handling of payments for the Bureau of Public Debt made
through the ACH Network.
◉ Unfair, Deceptive or Abusive Acts or Practices (UDAAP) . Answer:
Law to protect consumers purchasing financial products and services
requiring that consumers have access to information that lets them
choose the option they believe is best for their situation.
◉ Risk Evaluation . Answer: Process of comparing risk analysis results
to determine if risk is at an acceptable level.
◉ Business Impact Analysis (BIA) . Answer: Process of identifying the
potential impact of uncontrolled, non-specific events on an institution's
business processes.
◉ Enterprise Risk Management . Answer: Process of planning,
organizing, leading and controlling the activities of an organization to
minimize the effects of risk on that organization.
◉ Risk Measurement . Answer: Process to determine the likelihood of
an adverse event or threat occurring and the potential impact of such an
event on the institution.
, ◉ User Access Controls . Answer: Security technique used to regulate
who or what can view or use resources in a computing environment.
◉ Vulnerability Assessment . Answer: Systematic examination of
systems to identify, quantify and prioritize the security deficiencies of
the systems.
◉ Function Drill/Parallel Test . Answer: Testing method involves actual
mobilization of personnel to other sites attempting to establish
communications and perform actual recovery processing as outlined in
the business continuity plan (BCP).
◉ Risk Management . Answer: Total process required to identify,
control and minimize the impact of uncertain events.
◉ Layered Security . Answer: Use of different controls at different
points in a transaction process.
◉ Tabletop Exercise/Structured Walk-Through Test . Answer: Testing
method ensures critical personnel from all areas are familiar with the
business continuity plan (BCP) and may be used as an effective training
tool.
◉ Walk-Through Drill/Simulation Test . Answer: Testing method used
to apply a specific event scenario to the business continuity plan (BCP).
