1.2 - Understand the Risk Management Process CC Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   When prioritizing risks, which combination is typically used?

   • ACost and schedule
   • BAsset value and control strength
   • CLikelihood and impact
   • DThreat and vulnerability
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which of the following is an example of a risk assessment activity?

   • AImplementing a firewall
   • BConducting a security awareness training
   • CPurchasing cyber insurance
   • DAssigning a risk score based on likelihood and impact
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is a common output of the risk identification process?

   • AA cost-benefit analysis of controls
   • BA risk acceptance form
   • CA list of identified risks
   • DA disaster recovery plan
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What does 'risk tolerance' refer to in risk management?

   • AThe amount of risk an organization is willing to accept
   • BThe maximum amount of money spent on security controls
   • CThe likelihood that a risk will occur
   • DThe total number of risks identified in a risk assessment
   Reveal Solution Discussion Select an answer first
6. 10application · medium · select all that apply

   A small business is conducting a risk identification session for its online store. Which of the following are potential risks that should be identified? (Select all that apply.)

   • AA natural disaster that could damage the physical store location.
   • BA supplier failure that could disrupt the supply of products.
   • CA cyberattack that could compromise customer payment information.
   • DA change in tax laws that could increase operating costs.
   • EAn increase in customer satisfaction due to a new website design.
   Check answers Discussion Select an answer first