FAIR Practice Exam (80 Questions) with
100% Correct Verified Answers
Which qualifier would be used to describe an earthquake risk scenario?
A. Unstable
B. Fragile
C. Random
D. High risk - ANSWER A
Which qualifier is used to describe a scenario where the Loss Event Frequency is low in
spite of a high Threat Event Frequency, and where there is a single preventive control?
A. Unstable
B. High risk
C. Random
D. Fragile - ANSWER D
Which is a valid risk qualifier?
A. Fragile
B. Subjective
C. Qualitative
D. High risk - ANSWER A
Which of the following is usually considered a replacement loss?
,A. Restoring lost market share
B. Replacing a terminated employee
C. Paying for credit monitoring for customers affected by a security incident
D. Replacing a lost laptop - ANSWER D
PR costs associated with a security breach are considered what form of loss?
A. Productivity
B. Competitive Advantage
C. Reputation
D. Response - ANSWER D
Which of the following is usually considered the primary stakeholder in a risk scenario
involving a website?
A. The company owning the website
B. Users
C. Regulators
D. Web developers - ANSWER A
Which of the following are usually considered secondary stakeholders?
A. Shareholders
B. The Board of Directors
C. Employees
D. Contractors - ANSWER A
Which of the following regarding threat profiling is true?
A. It establishes a consistent Threat Event Frequency.
B. It helps to limit loss events.
, C. It determines which threat community is most likely to attack.
D. It documents key assumptions regarding threat communities. - ANSWER D
Threat communities are defined as ...
A. Vulnerabilities from a similar source
B. Communities of people who share the same beliefs
C. Risks from a common set of attackers
D. Groups of threat agents who share key characteristics - ANSWER D
How much risk is associated with an attack by a baseball bat?
he threat event in this scenario is ...
A. The assailant swinging the bat at the victim
B. The assailant seeing a potential victim
C. The victim seeing the assailant with a baseball bat
D. The victim dying from their wounds - ANSWER A
How much risk is associated with an attack by a baseball bat?
The loss event in this scenario is ...
A. The victim being hit by the baseball bat
B. The assailant swinging the bat at the victim
C. The victim seeing the assailant with a baseball bat
D. The victim dying from their wounds - ANSWER D
How much risk is associated with an attack by a baseball bat?
A secondary stakeholder in this scenario might be ...
100% Correct Verified Answers
Which qualifier would be used to describe an earthquake risk scenario?
A. Unstable
B. Fragile
C. Random
D. High risk - ANSWER A
Which qualifier is used to describe a scenario where the Loss Event Frequency is low in
spite of a high Threat Event Frequency, and where there is a single preventive control?
A. Unstable
B. High risk
C. Random
D. Fragile - ANSWER D
Which is a valid risk qualifier?
A. Fragile
B. Subjective
C. Qualitative
D. High risk - ANSWER A
Which of the following is usually considered a replacement loss?
,A. Restoring lost market share
B. Replacing a terminated employee
C. Paying for credit monitoring for customers affected by a security incident
D. Replacing a lost laptop - ANSWER D
PR costs associated with a security breach are considered what form of loss?
A. Productivity
B. Competitive Advantage
C. Reputation
D. Response - ANSWER D
Which of the following is usually considered the primary stakeholder in a risk scenario
involving a website?
A. The company owning the website
B. Users
C. Regulators
D. Web developers - ANSWER A
Which of the following are usually considered secondary stakeholders?
A. Shareholders
B. The Board of Directors
C. Employees
D. Contractors - ANSWER A
Which of the following regarding threat profiling is true?
A. It establishes a consistent Threat Event Frequency.
B. It helps to limit loss events.
, C. It determines which threat community is most likely to attack.
D. It documents key assumptions regarding threat communities. - ANSWER D
Threat communities are defined as ...
A. Vulnerabilities from a similar source
B. Communities of people who share the same beliefs
C. Risks from a common set of attackers
D. Groups of threat agents who share key characteristics - ANSWER D
How much risk is associated with an attack by a baseball bat?
he threat event in this scenario is ...
A. The assailant swinging the bat at the victim
B. The assailant seeing a potential victim
C. The victim seeing the assailant with a baseball bat
D. The victim dying from their wounds - ANSWER A
How much risk is associated with an attack by a baseball bat?
The loss event in this scenario is ...
A. The victim being hit by the baseball bat
B. The assailant swinging the bat at the victim
C. The victim seeing the assailant with a baseball bat
D. The victim dying from their wounds - ANSWER D
How much risk is associated with an attack by a baseball bat?
A secondary stakeholder in this scenario might be ...
