MIS 416 Exam 1 (A+ Guaranteed)

BIA stands for ___________. correct answers Business impact analysis The two primary steps you need to complete before progressing with an RA are defining the assessment and reviewing previous findings. correct answers True Malignant Threats are threats that are always present. correct answers True RPO stands for ____________. correct answers Recovery point objective A BIA typically identifies the customers and how the organization plans to serve them correct answers False RTO stands for ____________. correct answers Recovery time objective The risk value of an asset is directly proportional to the _______ and _______ of a particular threat exploiting a vulnerability after considering the controls in place that are protecting the asset. correct answers Impact, Likelihood The value of an assessment is only as valuable as the expertise of the experts. correct answers True A business impact analysis is intended to include all IT functions. correct answers False Which of the following would not be a common category for asking risk sensitivity questions? correct answers Skills Which of the following can be calculated using the values from an annualized rate of occurrence multiplied by the values from a single loss expectancy? correct answers Annualized loss expectancy A risk assessment is the same as a risk management program. correct answers False Low recovery time objectives are _______ but _______. correct answers achievable, costly It is often useful to categorize an organization's environments by risk sensitivity and then go deeper into the specific sensitive resources in each environment. correct answers True The likelihood of the occurrence of a vulnerability multiplied by the value of the information asset minus the percentage of risk mitigated by current controls plus the uncertainty of current knowledge of the vulnerability are each examples of _____. correct answers Risk assessment estimate factors By multiplying the asset value by the exposure factor, you can calculate which of the following? correct answers Single loss expectancy