A technology startup has a high risk appetite for product development but a very low risk tolerance for regulatory compliance. The startup is developing a new health app that will collect personal health information (PHI). The development team wants to release the app quickly to gain market share, but the compliance team requires a full security review before launch. What is the most appropriate course of action?

Release the app immediately and conduct the security review after launch.

Release the app to a limited group of users and conduct the review in parallel.

Skip the security review and rely on the cloud provider's security controls.

Delay the launch until the security review is complete.

Which of the following is a key output of a business impact analysis (BIA)?

Identification of critical business functions and their recovery priorities

A list of all potential threats to the organization

A set of controls to mitigate all identified risks

A detailed plan for responding to a specific incident

A risk manager is preparing a risk report for the board of directors. The board is composed of members with varying levels of technical expertise. The risk register contains a mix of quantitative data (e.g., ALE) and qualitative data (e.g., likelihood ratings). The board needs to understand the overall risk exposure and make decisions on resource allocation. What is the most effective way to present the risk information?

Present only the qualitative data because the board is not technical.

Present a summary dashboard with a risk heat map and key quantitative metrics.

Email the full risk register and ask the board to review it before the meeting.

Provide a detailed technical report with all quantitative data for each risk.

CompTIASecurity+

Domain 5Objective 2

Risk Management SY0-701 Practice Questions (Page 2)

Part of the Security program management and oversight domain, which accounts for 20% of the SY0-701 exam. CompTIA does not publish an official question count, but from its 90-minute exam (~35–60 total, ~7–12 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

9concepts

20%of the exam

Questions 6–10

6foundation · easy
An organization decides that it is willing to accept a certain level of risk in its new product launch, as long as the potential impact does not exceed a defined threshold. This decision reflects the organization's:
Select an answer first
7expert · hard
A technology startup has a high risk appetite for product development but a very low risk tolerance for regulatory compliance. The startup is developing a new health app that will collect personal health information (PHI). The development team wants to release the app quickly to gain market share, but the compliance team requires a full security review before launch. What is the most appropriate course of action?
Select an answer first
8foundation · easy
Which of the following is a key output of a business impact analysis (BIA)?
Select an answer first
9expert · hard
A risk manager is preparing a risk report for the board of directors. The board is composed of members with varying levels of technical expertise. The risk register contains a mix of quantitative data (e.g., ALE) and qualitative data (e.g., likelihood ratings). The board needs to understand the overall risk exposure and make decisions on resource allocation. What is the most effective way to present the risk information?
Select an answer first
10foundation · easy
A startup company is willing to take on significant risks to achieve rapid growth and market share. This willingness to pursue high-risk opportunities is best described as the company's:
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SY0-701

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by CompTIA. “SY0-701” is a trademark of its owner, used for identification only.

Risk Management SY0-701 Practice Questions (Page 2)

Questions 6–10

An organization decides that it is willing to accept a certain level of risk in its new product launch, as long as the potential impact does not exceed a defined threshold. This decision reflects the organization's:

Which of the following is a key output of a business impact analysis (BIA)?

A startup company is willing to take on significant risks to achieve rapid growth and market share. This willingness to pursue high-risk opportunities is best described as the company's:

Keep studying — Security program management and oversight