A company is starting a risk assessment for the first time. They have identified their assets, threats, and vulnerabilities. What is the next step in the risk assessment process?

Communicate the results to stakeholders

Analyze the risks to determine likelihood and impact

A company has a risk management process that includes annual risk assessments. After a major system change, a new critical vulnerability is discovered. According to the risk management lifecycle, what should the company do?

Conduct an ad-hoc risk assessment and update the risk register

Immediately implement a mitigation without assessing the risk

Wait for the next annual assessment to address it

Ignore the vulnerability if it was not in the original assessment

LPI Security Essentials

Domain 1Objective 2

021.2 Risk Assessment and Management (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 4)

Part of the 021 Security Concepts domain, which makes up ~15% of our current practice bank. Linux Professional Institute does not publish an official question count, but from its 60-minute exam (~25–40 total, ~4–6 in this domain), expect 1–2 from this objective — we provide 30 practice questions to prepare you well beyond it. (estimate)

30questions here

6free pages

8concepts

Questions 16–20

16foundation · easy
An organization decides to purchase cyber insurance to cover potential losses from a data breach. Which risk treatment strategy is this?
Select an answer first
17application · medium
A company is starting a risk assessment for the first time. They have identified their assets, threats, and vulnerabilities. What is the next step in the risk assessment process?
Select an answer first
18expert · medium
A company has a risk management process that includes annual risk assessments. After a major system change, a new critical vulnerability is discovered. According to the risk management lifecycle, what should the company do?
Select an answer first
19foundation · easy
A risk analyst rates the likelihood of a data breach as 'high' and the impact as 'moderate' using a scale of low, medium, and high. Which risk analysis method is being used?
Select an answer first
20application · easy
A company has identified three risks: Risk A has a high likelihood and high impact, Risk B has a low likelihood and high impact, and Risk C has a high likelihood and low impact. The company has limited resources. According to risk prioritization principles, which risk should be addressed first?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SECURITY-ESSENTIALS

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Linux Professional Institute. “SECURITY-ESSENTIALS” is a trademark of its owner, used for identification only.

021.2 Risk Assessment and Management (weight: 2) SECURITY-ESSENTIALS Practice Questions (Page 4)

Questions 16–20

An organization decides to purchase cyber insurance to cover potential losses from a data breach. Which risk treatment strategy is this?

A company is starting a risk assessment for the first time. They have identified their assets, threats, and vulnerabilities. What is the next step in the risk assessment process?

A company has a risk management process that includes annual risk assessments. After a major system change, a new critical vulnerability is discovered. According to the risk management lifecycle, what should the company do?

A risk analyst rates the likelihood of a data breach as 'high' and the impact as 'moderate' using a scale of low, medium, and high. Which risk analysis method is being used?

A company has identified three risks: Risk A has a high likelihood and high impact, Risk B has a low likelihood and high impact, and Risk C has a high likelihood and low impact. The company has limited resources. According to risk prioritization principles, which risk should be addressed first?

Keep studying — 021 Security Concepts