Manage Risk to Operations ISSEP Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   Which of the following is an example of an impact that would be considered when determining the impact of a risk?

   • AThe cost of a data breach
   • BThe presence of a firewall
   • CThe likelihood of a threat exploiting a vulnerability
   • DThe number of vulnerabilities in a system
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A manufacturing company has completed a risk assessment for its new IoT sensor network. The risk team needs to communicate the risk posture to the plant manager, who is not a security expert. Which documentation approach is most effective?

   • ACreate a summary report with risk ratings, key findings, and recommended actions in plain language.
   • BProvide a detailed technical report with all vulnerability scan results.
   • CEmail the raw risk assessment data to the plant manager for review.
   • DVerbally brief the plant manager without any written documentation.
   Reveal Solution Discussion Select an answer first
4. 13application · medium

   A software company is performing an inherent risk analysis for its new online code repository service. The team has identified that the service will store proprietary source code and will be accessible over the internet. Which factor is most important to consider when assessing the likelihood of a data breach?

   • AThe existing security controls, such as firewalls and encryption.
   • BThe potential impact on the company's stock price.
   • CThe attractiveness of the data to attackers and the ease of exploitation.
   • DThe cost of implementing additional security measures.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   In risk evaluation, what is the primary outcome of comparing inherent risk levels against risk criteria?

   • AA list of all vulnerabilities
   • BA list of threat sources
   • CA detailed cost-benefit analysis for each control
   • DA prioritized list of risks requiring treatment
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   In the risk management process, which element is part of establishing the risk context?

   • ASelecting risk treatment options
   • BDefining risk evaluation criteria
   • CIdentifying specific threat events
   • DAssessing the likelihood of a threat
   Reveal Solution Discussion Select an answer first