CTPRP EXAM 99 2026 TISSUE PROCESSING
PRACTICE SET ANSWERS FULL SOLUTION
◉ first layer of defense in physical and environmental security.
Answer: assess the perimeter
◉ monitoring and controls established for infrastructure.
Answer: - video surveillance
- electronic access control at essential ingress/egress points
- correlation of the video an dcard access data
- retention of video and logs for forensics
◉ asset management program.
Answer: process for documenting and maintaining an inventory of
hardware, software and information assets (includes a data
classification process)
◉ asset owner.
Answer: ensures assets are inventoried, properly classified and
protected, defines and reviews access restrictions and
classifications, reviews locations of where assets and data are being
used, and ensures proper handling of an asset
,◉ assets.
Answer: - hardware
- software
- data
- facilities
◉ asset management program.
Answer: should be approved by senior management and
communicated to all appropriate personnel
◉ potential egress points.
Answer: -email
-USB ports
-internet
-printing
-network
◉ DLP scanning.
Answer: -SSN/National ID
-account numbers
-functionality
, -email and attachments
◉ Commercial DLP software programs.
Answer: -capabilities vs configuration
-monitor vs block
-thresholds for acceptance
-escalation processes
-roles for review
◉ documented operating procedures.
Answer: ensure the effective mgmt, operation, integrity and security
of information systems and data
◉ change management/change control policy.
Answer: -change in network
-change in systems
-application updates
-code changes
-back out procedures
-problem mgmt
-environmental control over application development
PRACTICE SET ANSWERS FULL SOLUTION
◉ first layer of defense in physical and environmental security.
Answer: assess the perimeter
◉ monitoring and controls established for infrastructure.
Answer: - video surveillance
- electronic access control at essential ingress/egress points
- correlation of the video an dcard access data
- retention of video and logs for forensics
◉ asset management program.
Answer: process for documenting and maintaining an inventory of
hardware, software and information assets (includes a data
classification process)
◉ asset owner.
Answer: ensures assets are inventoried, properly classified and
protected, defines and reviews access restrictions and
classifications, reviews locations of where assets and data are being
used, and ensures proper handling of an asset
,◉ assets.
Answer: - hardware
- software
- data
- facilities
◉ asset management program.
Answer: should be approved by senior management and
communicated to all appropriate personnel
◉ potential egress points.
Answer: -email
-USB ports
-internet
-printing
-network
◉ DLP scanning.
Answer: -SSN/National ID
-account numbers
-functionality
, -email and attachments
◉ Commercial DLP software programs.
Answer: -capabilities vs configuration
-monitor vs block
-thresholds for acceptance
-escalation processes
-roles for review
◉ documented operating procedures.
Answer: ensure the effective mgmt, operation, integrity and security
of information systems and data
◉ change management/change control policy.
Answer: -change in network
-change in systems
-application updates
-code changes
-back out procedures
-problem mgmt
-environmental control over application development
