Certified Third-Party Risk Professional (CTPRP)
Last Update May 8, 2024
Total Questions : 125
We are offering FREE CTPRP Shared Assessments exam questions. All you do is to just go and sign up. Give your details, prepare CTPRP free exam questions and then go for complete pool of Certified Third-Party Risk Professional (CTPRP) test questions that will help you more.
Which of the following changes to the production environment is typically NOT subject to the change control process?
Which statement reflects a requirement that is NOT typically found in a formal Information Security Incident Management Program?
Which statement is FALSE when describing the differences between security vulnerabilities and security defects?
Which type of contract termination is MOST likely to occur after failure to remediate assessment findings?
The following statements reflect user obligations defined in end-user device policies
EXCEPT:
Which approach demonstrates GREATER maturity of physical security compliance?
When updating TPRM vendor classification requirements with a focus on availability, which
risk rating factors provide the greatest impact to the analysis?
Which of the following is typically NOT included within the scape of an organization's network access policy?
At which level of reporting are changes in TPRM program metrics rare and exceptional?
When defining due diligence requirements for the set of vendors that host web applications which of the following is typically NOT part of evaluating the vendor's patch
management controls?
Which of the following is NOT an example of a type of application security testing?
Which of the following actions is an early step when triggering an Information Security
Incident Response Program?
Upon completion of a third party assessment, a meeting should be scheduled with which
of the following resources prior to sharing findings with the vendor/service provider to
approve remediation plans:
Which of the following BEST reflects components of an environmental controls testing program?
Which statement BEST represents the roles and responsibilities for managing corrective actions upon completion of an onsite or virtual assessment?
Which statement is TRUE regarding defining vendor classification or risk tiering in a TPRM program?
An IT change management approval process includes all of the following components EXCEPT:
What attribute is MOST likely to be included in the software development lifecycle (SDLC) process?
Which example BEST represents the set of restrictive areas that require an additional authentication factor for access control?
Which approach for managing end-user device security is typically used for lost or stolen company-owned devices?
Tracking breach, credential exposure and insider fraud/theft alerts is an example of which continuous monitoring technique?
Which statement BEST represents the primary objective of a third party risk assessment:
When defining third party requirements for transmitting Pll, which factors provide stranger controls?
Which example of analyzing a vendor's response should trigger further investigation of their information security policies?
Which factor in patch management is MOST important when conducting postcybersecurity incident analysis related to systems and applications?
Which example of a response to external environmental factors is LEAST likely to be managed directly within the BCP or IT DR plan?
Which action statement BEST describes an assessor calculating residual risk?
Minimum risk assessment standards for third party due diligence should be:
Which example is typically NOT included in a Business Impact Analysis (BIA)?
Which of the following factors is LEAST likely to trigger notification obligations in incident response?
When measuring the operational performance of implementing a TPRM program, which example is MOST likely to provide meaningful metrics?
Select the risk type that is defined as: “A third party may not be able to meet its obligations due to inadequate systems or processes”.
Which of the following is NOT a key component of TPRM requirements in the software development life cycle (SDLC)?
TESTED 09 May 2024
