OCTAVE CASENET Practice Questions (Page 11)

Questions 51–52

1. 51foundation · easy

   Which of the following is the correct sequence of the three phases in the OCTAVE methodology?

   • ATechnological view, organizational view, strategy and plan development
   • BStrategy and plan development, organizational view, technological view
   • COrganizational view, strategy and plan development, technological view
   • DOrganizational view, technological view, strategy and plan development
   Reveal Solution Discussion Select an answer first
2. 52application · medium

   A small company with limited security expertise wants to perform a risk assessment using OCTAVE. The company's main concern is understanding which of its information assets are most important and what threats could affect them. Which characteristic of OCTAVE makes it suitable for this company?

   • AIt provides a fixed set of controls that must be implemented to achieve certification.
   • BIt is a self-directed methodology that enables the organization to assess risks using its own staff.
   • CIt requires the use of specialized vulnerability scanning tools to identify all technical weaknesses.
   • DIt focuses exclusively on regulatory compliance rather than business risk.
   Reveal Solution Discussion Select an answer first