CMC Technology & Digital Tools — Questions and Answers
Question 1: What is the principle of least privilege in CMC technology management?
- Users should only have the minimum access rights necessary for their job functions (Correct answer)
- All users should have full administrator access to all systems
- Access privileges should be based on employee seniority
- Everyone should share a single set of login credentials
Correct answer: Users should only have the minimum access rights necessary for their job functions
The principle of least privilege limits each user's access to only what is strictly necessary for their role, reducing potential damage from errors, insider threats, or compromised accounts.
Question 2: What is the purpose of backup and disaster recovery in CMC technology?
- To ensure data can be restored and operations resumed after a system failure or disaster (Correct answer)
- To create extra copies of files for sharing with colleagues
- To free up storage space on primary servers
- To satisfy vendor licensing requirements only
Correct answer: To ensure data can be restored and operations resumed after a system failure or disaster
Backup and disaster recovery plans ensure that critical data and systems can be restored and operations resumed within acceptable timeframes after hardware failures, cyberattacks, natural disasters, or human error.
Question 3: What is multi-factor authentication (MFA) in CMC security?
- A security method requiring two or more verification factors to gain access (Correct answer)
- Using the same password for multiple accounts for convenience
- A type of network firewall configuration
- A method for encrypting stored data
Correct answer: A security method requiring two or more verification factors to gain access
MFA requires users to provide two or more distinct verification factors (something they know, something they have, something they are) before gaining access, significantly reducing unauthorized access risk.
Question 4: What is change management in CMC technology operations?
- A structured process for evaluating, approving, and implementing changes to minimize risk (Correct answer)
- Making any changes immediately without review or documentation
- A process for replacing all legacy systems at once
- A method for changing employee passwords monthly
Correct answer: A structured process for evaluating, approving, and implementing changes to minimize risk
IT change management ensures that all changes to systems and infrastructure are evaluated for risk, properly approved, tested, documented, and implemented in a controlled manner to minimize service disruption.
Question 5: What is service level agreement (SLA) in CMC technology?
- A formal agreement defining expected service performance standards between provider and client (Correct answer)
- A legal document for employee termination
- A type of software programming language
- An equipment warranty document from the manufacturer
Correct answer: A formal agreement defining expected service performance standards between provider and client
An SLA defines specific, measurable performance standards (uptime, response time, resolution time) that a service provider commits to deliver, with consequences for failing to meet these standards.
Question 6: Why is documentation important in CMC technology management?
- It ensures knowledge transfer, supports troubleshooting, and maintains operational continuity (Correct answer)
- Documentation slows down technology work unnecessarily
- Only new systems require any documentation at all
- Documentation is only needed for compliance audits
Correct answer: It ensures knowledge transfer, supports troubleshooting, and maintains operational continuity
Technical documentation captures system configurations, procedures, and decisions, enabling knowledge transfer between team members, efficient troubleshooting, and operational continuity regardless of staff changes.
CMC Technology & Digital Tools
What is the principle of least privilege in CMC technology management?