Business Risk, Exposures and Threats CGEIT Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   Which of the following is an example of an emerging risk trend?

   • AAn increase in employee turnover over the last quarter
   • BA recent data breach that has already been remediated
   • CA known software vulnerability in a legacy system
   • DA regulatory change that is being proposed but not yet enacted
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   A healthcare provider is prioritizing risks for its annual budget. The risk team has identified two key risks: a data breach of patient records (high impact, low likelihood) and a delay in the rollout of a new patient portal (medium impact, high likelihood). The organization's risk appetite is low for regulatory fines but high for operational delays. Which risk should receive the highest priority for mitigation funding?

   • ANeither risk, because the organization should focus on emerging risks instead
   • BThe portal delay risk, because its high likelihood means it will likely occur
   • CThe data breach risk, because its impact exceeds the organization's tolerance for regulatory penalties
   • DBoth risks equally, because both are significant and require funding
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   What is the primary purpose of risk exposure analysis?

   • ATo transfer all risks to insurance providers
   • BTo eliminate all potential risks from the enterprise
   • CTo quantify the potential loss that could occur from identified risks
   • DTo document risks without further action
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   An e-commerce company is evaluating the risk of a distributed denial-of-service (DDoS) attack on its website. The risk team estimates that a successful attack would cause $2 million in lost sales and recovery costs. Historical data and industry reports suggest a 20% chance of such an attack occurring in the next year. What is the annualized loss expectancy (ALE) for this risk?

   • A$1,600,000
   • B$40,000
   • C$400,000
   • D$2,000,000
   Reveal Solution Discussion Select an answer first
6. 25foundation · easy

   What is the purpose of monitoring emerging risks?

   • ATo transfer all risks to insurance providers
   • BTo identify new risks that could affect the enterprise in the future
   • CTo eliminate all risks that have already occurred
   • DTo document risks for regulatory compliance only
   Reveal Solution Discussion Select an answer first