Cyber security and Information
Assurance EXAM LATEST
QUESTIONS AND VERIFIED
CORRECT ANSWERS
GRADED A+
Physical Control - CORRECT ANSWER-Physical items (other than computer hardware) used to
secure assets
Control Functions - CORRECT ANSWER-Deterrence
Prevention
Detective
Compensating
Corrective
Recovery
Deterrence - CORRECT ANSWER-Discourage, slow, or deter a threat actor
Prevention - CORRECT ANSWER-Stop a threat even from occuring
Detective - CORRECT ANSWER-Detect threats as, or after, they take place
, Compensating - CORRECT ANSWER-supplements or replaces another control
Corrective - CORRECT ANSWER-fix information or systems after an incident
Recovery - CORRECT ANSWER-restore necessary components to normal operation
Monitoring Risk - CORRECT ANSWER-* seeing if chosen risk responses are actually implemented
* determining if they are effective
* tracking changes in risk environment that need to be fed back into new assessment
* verifying compliance with legal, contractual, and policy requirements
Framing Risk - CORRECT ANSWER-is a strategic, governance-driven activity. The goal is a risk
management strategy. The strategy will determine how the organization intends to...
Assess the risk (choosing the assessment process, defining the model and approaches
Respond to the risk (remember the four options)
Monitor the results and ongoing changes in the environment, and
Feed that information back into subsequent risk assessments.
Structured Methodology - CORRECT ANSWER-increase the reproducibility and repeatability of
risk assessments.
Reproducibility - CORRECT ANSWER-refers to the ability to produce the same results from the
same data.
Repeatability - CORRECT ANSWER-refers to the ability to repeat the assessment in a way
consistent with prior assessments so that we have a reasonable way to compare results
Assurance EXAM LATEST
QUESTIONS AND VERIFIED
CORRECT ANSWERS
GRADED A+
Physical Control - CORRECT ANSWER-Physical items (other than computer hardware) used to
secure assets
Control Functions - CORRECT ANSWER-Deterrence
Prevention
Detective
Compensating
Corrective
Recovery
Deterrence - CORRECT ANSWER-Discourage, slow, or deter a threat actor
Prevention - CORRECT ANSWER-Stop a threat even from occuring
Detective - CORRECT ANSWER-Detect threats as, or after, they take place
, Compensating - CORRECT ANSWER-supplements or replaces another control
Corrective - CORRECT ANSWER-fix information or systems after an incident
Recovery - CORRECT ANSWER-restore necessary components to normal operation
Monitoring Risk - CORRECT ANSWER-* seeing if chosen risk responses are actually implemented
* determining if they are effective
* tracking changes in risk environment that need to be fed back into new assessment
* verifying compliance with legal, contractual, and policy requirements
Framing Risk - CORRECT ANSWER-is a strategic, governance-driven activity. The goal is a risk
management strategy. The strategy will determine how the organization intends to...
Assess the risk (choosing the assessment process, defining the model and approaches
Respond to the risk (remember the four options)
Monitor the results and ongoing changes in the environment, and
Feed that information back into subsequent risk assessments.
Structured Methodology - CORRECT ANSWER-increase the reproducibility and repeatability of
risk assessments.
Reproducibility - CORRECT ANSWER-refers to the ability to produce the same results from the
same data.
Repeatability - CORRECT ANSWER-refers to the ability to repeat the assessment in a way
consistent with prior assessments so that we have a reasonable way to compare results
