C842- Chapter 2- Risk Assessment
Questions All Solved Correct.
(b) Risk - Answer ___ is the probability of a threat agent exploiting a vulnerability and the
associated impact. (Note: Remember that a threat agent is defined as an entity that can exploit
a vulnerability, and vulnerability is defined as a weakness or lack of countermeasures.)
a-Risk policy
b-Risk
c-Incident
d-Attack
(d) Inside and outside attack - Answer Risks like hacking, cracking and attacking can be
grouped into which one of the following categories?
a-Equipment malfunction
b-Application error
c-Misuse of data
d-Inside and outside attack
e-Loss of data
False; Sharing trade secrets, fraud, espionage, and theft are risks that are grouped under
"Misuse of data" - Answer True/False Sharing trade secrets, fraud, espionage, and theft are
risks that are grouped under "Loss of data"?
(b) Risk policy; is a set of ideas to be implemented in order to minimize and mitigate risks faced
by an organization. - Answer __________ is a set of ideas to be implemented in order to
minimize and mitigate risks faced by an organization?
a-User access policy
b-Risk policy
c-Security policy
d-Security control
e-None of these options
(b) All of these options
a-Procedures for employees under training who are authorized to access the system
c-The computer system's rules of behavior and the consequences of violating the rules
d-Procedures to monitor the efficiency of the security controls
, e-Provisions for supporting situations like interruption in the system or system crash - Answer
Which of the following issues are included in risk policy?
a-Procedures for employees under training who are authorized to access the system
b-All of these options
c-The computer system's rules of behavior and the consequences of violating the rules
d-Procedures to monitor the efficiency of the security controls
e-Provisions for supporting situations like interruption in the system or system crash
c-All of these options
a-The assessment should adequately address the security requirements of the organization in
terms of integrity, availability and confidentiality.
b-The threat and risk assessment should be an integral part of the overall life cycle of the
infrastructure
d-Threat analysis and risk assessment process is a continual process that once started should be
reviewed regularly to ensure that the protection mechanisms currently in place still meet the
required objectives - Answer Which of the following is true regarding threat analysis and risk
assessment?
a-The assessment should adequately address the security requirements of the organization in
terms of integrity, availability and confidentiality.
b-The threat and risk assessment should be an integral part of the overall life cycle of the
infrastructure
c-All of these options
d-Threat analysis and risk assessment process is a continual process that once started should be
reviewed regularly to ensure that the protection mechanisms currently in place still meet the
required objectives
True
Threat analysis refers to the process of examining the source of cyber threats and evaluating
them in relation to the information system's vulnerabilities. The objective of the analysis is the
identify the threats that endanger a particular information system in a specific environment. -
Answer True/False; Threat analysis refers to the process of examining the source of cyber
threats and evaluating them in relation to the information system's vulnerabilities. The objective
of the analysis is the identify the threats that endanger a particular information system in a
specific environment?
c-Risk assessment
Is really a tool for risk management, it is a method of identifying vulnerabilities and threats, as
well as assessing the possible impacts to determine where to implement security controls -
Answer A _____________, which is really a tool for risk management, it is a method of
identifying vulnerabilities and threats, as well as assessing the possible impacts to determine
where to implement security controls?
Questions All Solved Correct.
(b) Risk - Answer ___ is the probability of a threat agent exploiting a vulnerability and the
associated impact. (Note: Remember that a threat agent is defined as an entity that can exploit
a vulnerability, and vulnerability is defined as a weakness or lack of countermeasures.)
a-Risk policy
b-Risk
c-Incident
d-Attack
(d) Inside and outside attack - Answer Risks like hacking, cracking and attacking can be
grouped into which one of the following categories?
a-Equipment malfunction
b-Application error
c-Misuse of data
d-Inside and outside attack
e-Loss of data
False; Sharing trade secrets, fraud, espionage, and theft are risks that are grouped under
"Misuse of data" - Answer True/False Sharing trade secrets, fraud, espionage, and theft are
risks that are grouped under "Loss of data"?
(b) Risk policy; is a set of ideas to be implemented in order to minimize and mitigate risks faced
by an organization. - Answer __________ is a set of ideas to be implemented in order to
minimize and mitigate risks faced by an organization?
a-User access policy
b-Risk policy
c-Security policy
d-Security control
e-None of these options
(b) All of these options
a-Procedures for employees under training who are authorized to access the system
c-The computer system's rules of behavior and the consequences of violating the rules
d-Procedures to monitor the efficiency of the security controls
, e-Provisions for supporting situations like interruption in the system or system crash - Answer
Which of the following issues are included in risk policy?
a-Procedures for employees under training who are authorized to access the system
b-All of these options
c-The computer system's rules of behavior and the consequences of violating the rules
d-Procedures to monitor the efficiency of the security controls
e-Provisions for supporting situations like interruption in the system or system crash
c-All of these options
a-The assessment should adequately address the security requirements of the organization in
terms of integrity, availability and confidentiality.
b-The threat and risk assessment should be an integral part of the overall life cycle of the
infrastructure
d-Threat analysis and risk assessment process is a continual process that once started should be
reviewed regularly to ensure that the protection mechanisms currently in place still meet the
required objectives - Answer Which of the following is true regarding threat analysis and risk
assessment?
a-The assessment should adequately address the security requirements of the organization in
terms of integrity, availability and confidentiality.
b-The threat and risk assessment should be an integral part of the overall life cycle of the
infrastructure
c-All of these options
d-Threat analysis and risk assessment process is a continual process that once started should be
reviewed regularly to ensure that the protection mechanisms currently in place still meet the
required objectives
True
Threat analysis refers to the process of examining the source of cyber threats and evaluating
them in relation to the information system's vulnerabilities. The objective of the analysis is the
identify the threats that endanger a particular information system in a specific environment. -
Answer True/False; Threat analysis refers to the process of examining the source of cyber
threats and evaluating them in relation to the information system's vulnerabilities. The objective
of the analysis is the identify the threats that endanger a particular information system in a
specific environment?
c-Risk assessment
Is really a tool for risk management, it is a method of identifying vulnerabilities and threats, as
well as assessing the possible impacts to determine where to implement security controls -
Answer A _____________, which is really a tool for risk management, it is a method of
identifying vulnerabilities and threats, as well as assessing the possible impacts to determine
where to implement security controls?
