Risk Management SY0-701 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which activity is an example of risk analysis?

   • ADetermining how a data breach could affect customer trust and revenue
   • BIdentifying that a new regulation could create compliance risks
   • CDeciding to accept the risk of a minor service outage
   • DCreating a risk register entry for a new vendor
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A risk manager is preparing a risk report for the IT director. The risk register contains 20 risks, but the IT director only wants to see the risks that require immediate attention. The risk manager has assessed each risk for likelihood and impact. What is the most effective way to report the risks to the IT director?

   • AEmail the full risk register and ask the IT director to review it before the meeting.
   • BProvide a detailed report on only the first risk in the register.
   • CPresent a risk heat map showing the risks with the highest likelihood and impact.
   • DList all 20 risks in the order they were identified.
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   An organization is prioritizing risks for remediation. Which activity is most directly associated with risk assessment?

   • AImplementing a firewall to reduce the risk of intrusion
   • BAssigning a risk score based on likelihood and impact
   • CPurchasing cyber insurance to cover potential losses
   • DDocumenting risks in a risk register
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   A company decides to purchase cyber insurance to cover potential losses from a data breach. This decision is an example of which risk strategy?

   • ARisk acceptance
   • BRisk mitigation
   • CRisk transfer
   • DRisk avoidance
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A risk manager is updating the risk register after a quarterly risk assessment. A previously identified risk has been fully mitigated, and the residual risk is now within the organization's risk tolerance. What should the risk manager do with this risk in the register?

   • ALeave the risk unchanged because the register is only updated annually.
   • BUpdate the risk's status to 'mitigated' and document the residual risk level.
   • CReclassify the risk as 'accepted' because it is within tolerance.
   • DRemove the risk from the register because it is no longer a concern.
   Reveal Solution Discussion Select an answer first