MIS 416 EXAM 1 (100% Verified)

___ is the negative result if the risk occurs correct answers impact The internal LAN is always considered a trusted zone correct answers False Risk ___ is a process of discovering & assessing theorists to an organizations operations & determining how those risks can be mitigated correct answers management A (n) ___ is a potential weakness in an asset or its defensive controls correct answers Vulnerability A(n) __ is a common type of attack to deny service on Internet-facing servers. correct answers DDOS According to the CIA triad, which of the following is a desirable characteristic for computer security? correct answers Availability What are the valid points for addressing a risk? correct answers Mitigate Accept Transfer Avoid T/F: CBA stands for Cost Benefit Authorization correct answers False Identify the true statement: a. All vulnerabilities result in losses b. Vulnerability is a synonym for loss c. Exploited vulnerabilities result in losses d. The method used to take advantage of a vulnerability is known as a threat correct answers c. Exploited vulnerabilities result in losses T/F: Asset valuation is not a major priority of risk management correct answers False All of the following are reasons to perform risk assessments except? a. It enables us to determine a proper security budget b. It enables us to determine what assets are high-risk assets c. It enables us to determine what assets need protection d. It enables us to determine which risk assessment framework we should be using e. It enables us to determine what controls or safeguards should be in place correct answers d. It enables us to determine which risk assessment framework we should be using T/F: In a qualitative risk analysis it is important to define value according to the standard scale. correct answers False