Risk Assessment and Analysis CISM Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which event would most likely trigger an ad-hoc risk assessment?

   • AA change in the office coffee brand
   • BA scheduled backup of servers
   • CThe annual performance review of employees
   • DA significant change in the organization's business processes
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which technique is commonly used to identify vulnerabilities in an organization's systems and applications?

   • AControl cost analysis
   • BRisk register update
   • CRisk appetite setting
   • DVulnerability scanning
   Reveal Solution Discussion Select an answer first
4. 13application · medium · select all that apply

   A company is analyzing risks using a quantitative approach. Which of the following are outputs of quantitative risk analysis? (Select all that apply.)

   • AA qualitative rating of 'high' for a risk
   • BAnnual rate of occurrence (ARO) for each risk
   • CA risk heat map with color-coded cells
   • DAnnualized loss expectancy (ALE) for each risk
   • ESingle loss expectancy (SLE) for each risk
   Check answers Discussion Select an answer first
5. 14foundation · easy

   Which tool is commonly used in qualitative risk analysis to visualize the relationship between likelihood and impact?

   • AAnnualized loss expectancy formula
   • BReturn on investment calculation
   • CMonte Carlo simulation
   • DProbability/impact matrix
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   An organization lacks historical data and needs a quick, cost-effective risk assessment to prioritize risks by severity. Which methodology is most suitable?

   • AMonte Carlo simulation
   • BQuantitative
   • CQualitative
   • DAnnualized loss expectancy
   Reveal Solution Discussion Select an answer first