Which of the following is an example of a mitigating control?

Discontinuing the business process that introduces the risk

Accepting the risk because the cost of mitigation is too high

Purchasing insurance to cover potential losses

Implementing a firewall to reduce the risk of unauthorized network access

Why is it important to verify the asset inventory as part of a risk management program?

To determine the exact number of employees for HR purposes

To comply with software licensing agreements

To ensure that all assets are identified so risks can be accurately assessed

To assign financial values to assets for insurance purposes only

Information Systems Security Management Professional

Domain 3Objective 1

3.1 Develop and Manage a Risk Management Program ISSMP Practice Questions (Page 8)

Part of the Risk Management domain, which accounts for 20% of the ISSMP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~14–24 in this domain), expect 4–6 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

12concepts

20%of the exam

12 Concepts in This Objective

Risk Management Program Objectives
Stakeholder Engagement in Risk Objectives
Organizational Risk Program Scope
Risk Tolerance and Appetite
Asset Inventory Verification
Organizational Risk Analysis
Countermeasures and Mitigating Controls
Risk Treatment Options
Cost-Benefit Analysis of Risk Treatments
Risk Treatment Recommendations
Documenting Risk and Issue Treatments
Risk Monitoring and Reporting

Questions 36–37

36foundation · easy
Which of the following is an example of a mitigating control?
Select an answer first
37foundation · easy
Why is it important to verify the asset inventory as part of a risk management program?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to ISSMP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSMP” is a trademark of its owner, used for identification only.

3.1 Develop and Manage a Risk Management Program ISSMP Practice Questions (Page 8)

Questions 36–37

Which of the following is an example of a mitigating control?

Why is it important to verify the asset inventory as part of a risk management program?

Keep studying — Risk Management