Question 1
Which OWASP Top 10 vulnerability occurs when an attacker inserts malicious SQL code into an input field that is directly passed to a database query?
Correct Answer:
SQL Injection
Question 2
What is the primary purpose of input validation in secure application development?
Correct Answer:
To ensure data conforms to expected format before processing
Question 3
A developer stores session tokens in a URL query string. Which security risk does this practice introduce?
Correct Answer:
Session token exposure via browser history and server logs
Question 4
Which type of Cross-Site Scripting (XSS) attack stores malicious script on the server to be served to all subsequent visitors?
Correct Answer:
Stored XSS
Question 5
In the Secure Software Development Lifecycle (SSDLC), during which phase should threat modeling primarily be performed?
Correct Answer:
Design
Question 1
Exam overview

About this Exam

Prepare with the Certified CMMC Professional (CCP) practice quiz. This question bank includes 170 questions covering professional, cybersecurity, role, protection, and activities. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

Certified CMMC Professional (CCP)

This practice set contains 170 questions from the matching question bank and focuses on professional, cybersecurity, role, protection, and activities. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions