Risk Assessment and Analysis CISM Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In quantitative risk analysis, what does the Single Loss Expectancy (SLE) represent?

   • AThe frequency of a risk occurring in a year
   • BThe expected loss each time a specific risk materializes
   • CThe annualized loss from a risk
   • DThe total value of all assets at risk
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which factor is most directly used to prioritize risks during risk evaluation?

   • ANumber of controls already in place
   • BLikelihood and impact
   • CColor of the risk owner's department
   • DAge of the risk assessment document
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Who is ultimately accountable for ensuring that a specific risk is managed appropriately within an organization?

   • AThe help desk technician
   • BThe security vendor
   • CThe external auditor
   • DThe risk owner
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   In the broader information security risk management process, what is the primary role of risk assessment?

   • ATo identify and analyze risks to inform treatment decisions
   • BTo communicate risks to the board
   • CTo monitor risk over time
   • DTo implement security controls
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   A government agency must assess risks for a new citizen-facing portal. The agency has limited historical data on cyber incidents, but it has strong expert opinions from security staff. The risk assessment must produce a defensible prioritization for budget requests, but the agency cannot wait for years of data collection. Which approach is most appropriate?

   • AQualitative assessment using expert judgment and a risk matrix
   • BDefer the assessment until sufficient historical data is available
   • CHybrid assessment that relies solely on automated scanning tools
   • DQuantitative assessment using hypothetical ALE calculations
   Reveal Solution Discussion Select an answer first