Risk Assessment Concepts and Standards CRISC Practice Questions (Page 3)

Questions 11–12

1. 11application · medium

   A financial services firm is evaluating the risk of a new online banking platform. The risk team has identified a vulnerability in the authentication module and a threat actor who could exploit it. They are now estimating the potential financial loss if the exploit succeeds. Which risk assessment concept are they quantifying?

   • AResidual risk
   • BInherent risk
   • CLikelihood
   • DImpact
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A risk analyst is documenting the risk of a phishing attack. They note that the attacker is an external actor with moderate skill, and the vulnerability is the lack of email filtering. What is the threat in this scenario?

   • AThe lack of email filtering
   • BThe phishing attack
   • CThe email system
   • DThe external actor
   Reveal Solution Discussion Select an answer first