Information Systems Security Management Professional
Domain 3Objective 3
3.3 Conduct Risk Assessments ISSMP Practice Questions (Page 1)
Part of the Risk Management domain, which accounts for 20% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 4–6 from this objective — we provide 26 practice questions to prepare you well beyond it. (estimate)
26questions here
6free pages
5concepts
20%of the exam
Questions 1–5
- 1
An asset is valued at $100,000. The exposure factor (EF) is 20%. The Annualized Rate of Occurrence (ARO) is 0.5. What is the Annualized Loss Expectancy (ALE)?
Select an answer first - 2
A risk assessment team has completed a qualitative analysis and produced a risk register. Which of the following is the most appropriate way to communicate the results to the IT department?
Select an answer first - 3
A company is deciding whether to invest in a new security control. The control costs $50,000 per year. The risk it mitigates has an ALE of $80,000. The control is expected to reduce the ALE to $20,000. What is the annualized return on security investment (ROSI)?
Select an answer first - 4
A retail company is identifying risk factors for its e-commerce platform. Which of the following is an example of an external threat?
Select an answer first - 5
A company is identifying risk factors for its cloud migration project. Which of the following is an example of an external threat?
Select an answer first
Finished these 5 questions?
Review the revealed explanations, or continue through the curriculum.
Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.