Quiz 1 Cyber security Risk
Management Questions with Verified
Answers
In relation to risk management, IP stands for ___________. - ANSWERSa. intangible
property
b. Internet Property
c. Internet Protocol
d. Intellectual Property
ans: d
Identify the true statement. - ANSWERSa. All vulnerabilities in losses.
b. Exploited vulnerabilities result in losses.
c. Vulnerability is a synonym for loss.
d. The method used to take advantage of a vulnerability is known as a threat
ans: b
What is NOT an example of unintentional threat? - ANSWERSa. An employee enters
important data incorrectly on a day when he accidentally leaves his glasses at home
b. The server for an Internet-based business crashes
c. Malware written and run by a "script kiddie" just to see what he could do destroys a
company's information database.
d. A swine flu epidemic causes a massive reduction in the labor force that maintains a
company's systems.
ans: c
Total risk = ______________ - ANSWERSa. threat x vulnerability
b. benefit - cost
c. (benefit - cost) x asset value
d. threat x vulnerability x asset value
ans: d
Systematically tackling the threats and vulnerabilities in the seven individual domains of
a typical IT infrastructure helps you: - ANSWERSa. prioritize the routine tasks and
functions performed by employees within the organization
b. identify the employees most likely to perform an insider attack on the organization
, c. answer the "why" questions regarding potential areas of attack and the motives of
attackers.
d. organize the roles, responsibilities, and account abilities for risk management and risk
mitigation
ans: d
Choose the most accurate statement with respect to creating a risk management plan. -
ANSWERSa. A risk management plan is an important document legally required to run
an online business.
b. A risk management plan eliminates threats to your business.
c. A risk management plan can help ensure your business is in compliance with
important regulations.
d. A risk management plan is simpler and more effective than a cost-benefit analysis
ans: c
What is NOT a vulnerability that may affect a website for an online company? -
ANSWERSa. Lack of protection from an intrusion detection system.
b. loss of internet connectivity
c. no firewall
d. out of date antivirus software
ans: b
In a risk management plan, how should you complete the step of describing the
procedures and schedules for accomplishment? - ANSWERSa. Recommend a solution
for any threat or vulnerability that attempts to mitigate associated risks; justify your
recommendation; list the tasks necessary for addressing the vulnerability; and provide
management with an estimation of how long it will take to complete the recommendation
b. Create an affinity diagram and a threat-likelihood-impact matrix; assign the task to a
stakeholder; and submit the official schedule to management.
c. Create an affinity diagram and threat-likelihood-impact matrix; recommend a solution
to every vulnerability; and ask management to create a schedule of how long they think
it will take to address all the vulnerabilities.
d. Present stakeholders with a list of vulnerabilities that need addressing and the steps
involved with fixing each vulnerability; ask them to asses how long it will take them to
address each of those vulnerabilities; and create an official schedule for the
stakeholders based on their estimated timetable.
ans: a
Companies use risk management techniques to differentiate ______ from _______? -
ANSWERSa. vulnerabilities, weaknesses
b. sever risks, minor risks
c. costs, benefits
Management Questions with Verified
Answers
In relation to risk management, IP stands for ___________. - ANSWERSa. intangible
property
b. Internet Property
c. Internet Protocol
d. Intellectual Property
ans: d
Identify the true statement. - ANSWERSa. All vulnerabilities in losses.
b. Exploited vulnerabilities result in losses.
c. Vulnerability is a synonym for loss.
d. The method used to take advantage of a vulnerability is known as a threat
ans: b
What is NOT an example of unintentional threat? - ANSWERSa. An employee enters
important data incorrectly on a day when he accidentally leaves his glasses at home
b. The server for an Internet-based business crashes
c. Malware written and run by a "script kiddie" just to see what he could do destroys a
company's information database.
d. A swine flu epidemic causes a massive reduction in the labor force that maintains a
company's systems.
ans: c
Total risk = ______________ - ANSWERSa. threat x vulnerability
b. benefit - cost
c. (benefit - cost) x asset value
d. threat x vulnerability x asset value
ans: d
Systematically tackling the threats and vulnerabilities in the seven individual domains of
a typical IT infrastructure helps you: - ANSWERSa. prioritize the routine tasks and
functions performed by employees within the organization
b. identify the employees most likely to perform an insider attack on the organization
, c. answer the "why" questions regarding potential areas of attack and the motives of
attackers.
d. organize the roles, responsibilities, and account abilities for risk management and risk
mitigation
ans: d
Choose the most accurate statement with respect to creating a risk management plan. -
ANSWERSa. A risk management plan is an important document legally required to run
an online business.
b. A risk management plan eliminates threats to your business.
c. A risk management plan can help ensure your business is in compliance with
important regulations.
d. A risk management plan is simpler and more effective than a cost-benefit analysis
ans: c
What is NOT a vulnerability that may affect a website for an online company? -
ANSWERSa. Lack of protection from an intrusion detection system.
b. loss of internet connectivity
c. no firewall
d. out of date antivirus software
ans: b
In a risk management plan, how should you complete the step of describing the
procedures and schedules for accomplishment? - ANSWERSa. Recommend a solution
for any threat or vulnerability that attempts to mitigate associated risks; justify your
recommendation; list the tasks necessary for addressing the vulnerability; and provide
management with an estimation of how long it will take to complete the recommendation
b. Create an affinity diagram and a threat-likelihood-impact matrix; assign the task to a
stakeholder; and submit the official schedule to management.
c. Create an affinity diagram and threat-likelihood-impact matrix; recommend a solution
to every vulnerability; and ask management to create a schedule of how long they think
it will take to address all the vulnerabilities.
d. Present stakeholders with a list of vulnerabilities that need addressing and the steps
involved with fixing each vulnerability; ask them to asses how long it will take them to
address each of those vulnerabilities; and create an official schedule for the
stakeholders based on their estimated timetable.
ans: a
Companies use risk management techniques to differentiate ______ from _______? -
ANSWERSa. vulnerabilities, weaknesses
b. sever risks, minor risks
c. costs, benefits
