Risk Assessment DS0-001 Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A small business has identified two risks: (1) a fire in the server room could destroy all hardware, and (2) a temporary employee might accidentally delete a shared folder. The business has a limited budget. Which risk should be treated as higher priority?

   • AThe accidental deletion risk, because it is more likely to occur
   • BBoth risks equally, because both could cause data loss
   • CThe fire risk, because it has a catastrophic impact on the entire business
   • DNeither risk, because the business has insurance
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A risk has been assessed as having a high likelihood of occurrence and a high impact on business operations. According to standard risk evaluation practices, how should this risk be prioritized?

   • ADeferred until more data is collected
   • BHigh priority, because it poses a significant threat to operations
   • CMedium priority, because likelihood and impact cancel each other out
   • DLow priority, because it is already well known
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary goal of a business continuity plan (BCP)?

   • ATo replace the need for disaster recovery planning
   • BTo document all past incidents for regulatory compliance
   • CTo eliminate all possible risks to the organization
   • DTo ensure critical business operations can continue during and after a disruption
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which event should trigger an immediate review and update of a business continuity plan?

   • AA significant change in the organization's IT infrastructure
   • BAn employee's birthday
   • CA routine software update on a non-critical system
   • DA minor change in office furniture
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   An online retailer has identified that a distributed denial-of-service (DDoS) attack could take its website offline. The company wants to reduce the impact of this risk. Which strategy is MOST effective for reducing impact?

   • AImplement a DDoS protection service that filters malicious traffic
   • BTrain employees to recognize phishing emails
   • CPurchase cyber insurance to cover lost revenue
   • DIncrease the bandwidth of the internet connection
   Reveal Solution Discussion Select an answer first