Risk Management SY0-701 Practice Questions (Page 5)

Questions 21–25

1. 21expert · hard

   A financial institution is conducting a BIA to determine the impact of a potential outage of its online banking platform. The BIA shows that a 1-hour outage would result in $50,000 in lost transaction fees and $20,000 in customer support costs. The institution's risk appetite for operational disruptions is low. The security team estimates that a distributed denial-of-service (DDoS) attack has a 5% chance of occurring each year. What is the annualized loss expectancy (ALE) for this risk?

   • A$50,000
   • B$350,000
   • C$70,000
   • D$3,500
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   An organization is conducting a study to determine the financial and operational impact of a potential disruption to its order processing system. This study is called a:

   • AVulnerability assessment
   • BPenetration test
   • CBusiness impact analysis
   • DRisk register
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following is a primary purpose of a risk register?

   • ATo replace the need for a business impact analysis
   • BTo automatically remediate identified vulnerabilities
   • CTo provide a centralized record of risks and their management
   • DTo serve as a legal contract with third-party vendors
   Reveal Solution Discussion Select an answer first
5. 24expert · hard

   A logistics company is assessing the risk of a cyberattack on its fleet management system. The BIA shows that a 1-hour outage would cause $20,000 in lost revenue and $10,000 in recovery costs. The security team estimates that a successful attack has a 10% chance of occurring each year. The company's risk tolerance for operational disruptions is moderate. What is the annualized loss expectancy (ALE) for this risk?

   • A$20,000
   • B$30,000
   • C$300,000
   • D$3,000
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A project manager is preparing a risk report for the executive steering committee. The risk register contains 15 risks, but the committee only has time to review the top 5. The project manager needs to present the risks in a way that supports informed decision-making. What is the most effective way to report the risks to the committee?

   • APresent a heat map showing the top 5 risks based on likelihood and impact.
   • BList all 15 risks alphabetically with their full descriptions.
   • CProvide a detailed report on only the first risk in the register.
   • DEmail the full risk register and ask the committee to review it before the meeting.
   Reveal Solution Discussion Select an answer first