Risk Management Lifecycle CGEIT Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which activity is part of risk response implementation?

   • ADefining risk appetite
   • BDeploying a new security control
   • CConducting a risk analysis workshop
   • DReviewing risk response performance
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company has implemented a new access control system to mitigate the risk of unauthorized access. Six months later, the risk manager wants to ensure the control is still effective. Which activity is most appropriate for the monitoring and review phase?

   • AArchive the risk register because the risk has been mitigated
   • BUpdate the risk appetite statement to match the current risk level
   • CRe-assess the risk from scratch using a new methodology
   • DReview access logs and conduct periodic penetration tests
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company has implemented a new firewall to mitigate the risk of network intrusions. During a routine review, the security team discovers that the firewall logs show an increasing number of blocked connection attempts from a new type of malware. What is the most appropriate action in the monitoring and review phase?

   • AAnalyze the logs to determine if the firewall controls are still effective and adjust as needed
   • BIgnore the logs because the firewall is blocking the attacks
   • CUpdate the risk register to reflect the increased threat activity
   • DDisable the firewall to allow the malware to be studied
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A financial services firm has decided to mitigate the risk of insider data theft by implementing a data loss prevention (DLP) system. The risk team has approved the response plan. What is the most important next step in the risk management lifecycle?

   • AConduct a cost-benefit analysis of the DLP system
   • BDeploy the DLP system and integrate it into operational processes
   • CUpdate the risk register to reflect the mitigation decision
   • DWait for a security incident to test the DLP system
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A company has decided to mitigate the risk of data loss by implementing an encrypted backup solution. The risk response plan includes deploying the solution across all servers. During implementation, the IT team discovers that some legacy servers cannot support the encryption software. What is the most appropriate action?

   • AProceed with implementation on supported servers and document the gap for legacy servers
   • BAbandon the implementation because it cannot be fully completed
   • CIgnore the legacy servers and assume they are not at risk
   • DForce the encryption software onto legacy servers even if it causes performance issues
   Reveal Solution Discussion Select an answer first