MIS 416 Exam 1 (100% Accurate)

Which of the following can be calculated using the values from an annualized rate of occurrence multiplied by the values from a single loss expectancy? A) cost benefit analysis B) annualized loss expectancy C) asset valuation D) operational feasibility correct answers B What is an indirect objective of a business impact analysis? A) to evaluate the effectiveness of controls B) to justify funding C) to calculate MAOs D) to identify an impact that can result from disruptions in a business correct answers B An organization should implement as many controls as possible. T/F? correct answers F A business impact analysis is intended to include all IT functions. T/F? correct answers F The value of an assessment is only as valuable as the expertise of the experts. T/F? correct answers T Some recovery point objectives require you to recover data up to a moment in time. T/F? correct answers T When should you perform a risk assessment? A) when eliminating a threat B) continuously C) when mitigating a threat D) periodically correct answers D It is often useful to categorize an organization's environments by risk sensitivity and then go deeper into the specific sensitive resources in each environment. T/F? correct answers T Which of the following is NOT an example of what type of document a risk assessor could request during a risk assessment? A) Asset Inventories B) Previously considered IT Security Recommendations C) Current Security Policies, Standards and Procedures D) Previous Information Security Risk Assessments E) Copy of the BIA correct answers B When using the RIIOT method for data gathering, it is essential to inspect security controls prior to interviewing key personnel in order to understand the systems that employees are operating and potentially putting at risk. T/F? correct answers F