CISSP (ISC2) questions with correct answers

With the realm of IT security, what constitutes a risk? - Answer Threat coupled with vunerability When determining the value of an intangible asset what is the BEST approach? - Answer with the assistance of a finance of accouting professional determine how much profit the asset has returned. Qualitative risk assessment is earmarked by which of the following? - Answer ease of implementation and can be completed by personnel with a limited understanding of the risk assessment process Single loss expectancy (SLE) is calculated by using: - Answer asset value and exposure factor consideration for which type of risk assessment to perform includes all of the following: - Answer culture of organization, budget, capabilities and resources security awareness training includes: - Answer security roles and responsibilities of staff what is the minimum and customary practice of responsible protection of assets that affects a community or societal norm? - Answer due care effective security management: - Answer reduces risk to an acceptable level