MISY 5325 PRACTICE SET 2026 BUSINESS
INTELLIGENCE QUESTIONS HIGH YIELD A+
◉ Hajar is a security specialist. Her organization has about 500
systems that must be tracked for inventory purposes. She is
preparing an email to her manager that describes the benefits of
including specific details about software in the inventory, as well as
the use of an automated asset management system. Which of the
following is not one of those benefits?
Answer: The frequency of operating system upgrades will be
reduced.
◉ Hardening a server refers to:
A. expanding its attack surface.
B. a type of attack that removes the authorization to access a
company's systems from high-level employees in a corporation.
C. the combination of all the steps that it takes to protect a
vulnerable system and make it more secure than the default
installation.
D. a type of attack that deletes vital data from a server.
Answer: the combination of all the steps that it takes to protect a
vulnerable system and make it more secure than the default
installation.
,◉ How can you determine the importance of a system?
Answer: By how the system is used
◉ In a quantitative risk assessment, what describes the loss that will
happen to the asset as a result of a threat?
Answer: Exposure factor (EF)
◉ In a risk assessment, which of the following refers to how
responsibilities are assigned?
Answer: Management Structure
◉ In a risk management plan, how should you complete the step of
describing the procedures and schedules for accomplishment?
A. Create an affinity diagram and a threat-likelihood-impact matrix;
assign the task to a stakeholder; and submit the official schedule to
management.
B. Present stakeholders with a list of vulnerabilities that need
addressing and the steps involved with fixing each vulnerability; ask
them to assess how long it will take them to address each of those
vulnerabilities; and create an official schedule for the stakeholders
based on their estimated timetable.
, C. For any threat or vulnerability, recommend a solution that
attempts to mitigate associated risks; justify your recommendation;
list the tasks necessary for addressing the vulnerability; and provide
management with an estimate of how long it will take to complete
the recommendation.
Answer: For any threat or vulnerability, recommend a solution that
attempts to mitigate associated risks; justify your recommendation;
list the tasks necessary for addressing the vulnerability; and provide
management with an estimate of how long it will take to complete
the recommendation.
◉ In which of the following domains does the IT infrastructure link
to a wide area network (WAN) and the Internet?
A. WAN Domain
B. Systems/Applications Domain
C. LAN Domain
D. LAN-to-WAN Domain
Answer: LAN-to-WAN Domain
◉ Isabella is a risk management specialist for her organization. She
is training Arturo, a new hire, on aspects of risk management. Arturo
asks her what factors he should consider when assigning a value to
an asset. Which of the following does Isabella tell him is the least
useful?
INTELLIGENCE QUESTIONS HIGH YIELD A+
◉ Hajar is a security specialist. Her organization has about 500
systems that must be tracked for inventory purposes. She is
preparing an email to her manager that describes the benefits of
including specific details about software in the inventory, as well as
the use of an automated asset management system. Which of the
following is not one of those benefits?
Answer: The frequency of operating system upgrades will be
reduced.
◉ Hardening a server refers to:
A. expanding its attack surface.
B. a type of attack that removes the authorization to access a
company's systems from high-level employees in a corporation.
C. the combination of all the steps that it takes to protect a
vulnerable system and make it more secure than the default
installation.
D. a type of attack that deletes vital data from a server.
Answer: the combination of all the steps that it takes to protect a
vulnerable system and make it more secure than the default
installation.
,◉ How can you determine the importance of a system?
Answer: By how the system is used
◉ In a quantitative risk assessment, what describes the loss that will
happen to the asset as a result of a threat?
Answer: Exposure factor (EF)
◉ In a risk assessment, which of the following refers to how
responsibilities are assigned?
Answer: Management Structure
◉ In a risk management plan, how should you complete the step of
describing the procedures and schedules for accomplishment?
A. Create an affinity diagram and a threat-likelihood-impact matrix;
assign the task to a stakeholder; and submit the official schedule to
management.
B. Present stakeholders with a list of vulnerabilities that need
addressing and the steps involved with fixing each vulnerability; ask
them to assess how long it will take them to address each of those
vulnerabilities; and create an official schedule for the stakeholders
based on their estimated timetable.
, C. For any threat or vulnerability, recommend a solution that
attempts to mitigate associated risks; justify your recommendation;
list the tasks necessary for addressing the vulnerability; and provide
management with an estimate of how long it will take to complete
the recommendation.
Answer: For any threat or vulnerability, recommend a solution that
attempts to mitigate associated risks; justify your recommendation;
list the tasks necessary for addressing the vulnerability; and provide
management with an estimate of how long it will take to complete
the recommendation.
◉ In which of the following domains does the IT infrastructure link
to a wide area network (WAN) and the Internet?
A. WAN Domain
B. Systems/Applications Domain
C. LAN Domain
D. LAN-to-WAN Domain
Answer: LAN-to-WAN Domain
◉ Isabella is a risk management specialist for her organization. She
is training Arturo, a new hire, on aspects of risk management. Arturo
asks her what factors he should consider when assigning a value to
an asset. Which of the following does Isabella tell him is the least
useful?
