MIS 416 Exam 1 Quiz 1(Correct answers)
Balanced security satisfies everyone (T/F) correct answers False
Qualitative Risk Analysis determine the level of risk based on the __________ and _________ of risk.
probability, impact
threat, probability
impact, threat
threat, dollar value correct answers probability, impact
Risk ________ is the practice of identifying, assessing, controlling, and mitigating risks. correct answers
Management
The first section of a qualitative Risk analysis attempts to prioritize risk. The second section of
Qualitative Risk Analysis evaluates the effectiveness of controls. (T/F) correct answers True
Exploited vulnerabilities result in losses. (T/F) correct answers True
Hardening a server makes the server more secure. (T/F) correct answers True
Hardening the server to the combination of all steps that it takes to protect a vulnerable system and make
it more secure than the default installation. (T/F) correct answers True
Another term for risk mitigation is ___________ correct answers risk reduction
What is NOT a type of control? correct answers private
, What is NOT a classification of data?
private
proprietary
public
risk correct answers Risk
Companies use risk management techniques to differentiate ________ from _________?
vulnerabilities, threats
vulnerabilities, weaknesses
severe risks, minor risks
costs, benefits correct answers severe risks, minor risks
Making a system more secure often makes it easier to use (T/F) correct answers False
What is the first element to be considered when conducting a Risk Assessment? correct answers What are
the organization's assets
What is NOT a benefit of a qualitative Risk Analysis?
uses the opinions of the experts
is easy to complete
Balanced security satisfies everyone (T/F) correct answers False
Qualitative Risk Analysis determine the level of risk based on the __________ and _________ of risk.
probability, impact
threat, probability
impact, threat
threat, dollar value correct answers probability, impact
Risk ________ is the practice of identifying, assessing, controlling, and mitigating risks. correct answers
Management
The first section of a qualitative Risk analysis attempts to prioritize risk. The second section of
Qualitative Risk Analysis evaluates the effectiveness of controls. (T/F) correct answers True
Exploited vulnerabilities result in losses. (T/F) correct answers True
Hardening a server makes the server more secure. (T/F) correct answers True
Hardening the server to the combination of all steps that it takes to protect a vulnerable system and make
it more secure than the default installation. (T/F) correct answers True
Another term for risk mitigation is ___________ correct answers risk reduction
What is NOT a type of control? correct answers private
, What is NOT a classification of data?
private
proprietary
public
risk correct answers Risk
Companies use risk management techniques to differentiate ________ from _________?
vulnerabilities, threats
vulnerabilities, weaknesses
severe risks, minor risks
costs, benefits correct answers severe risks, minor risks
Making a system more secure often makes it easier to use (T/F) correct answers False
What is the first element to be considered when conducting a Risk Assessment? correct answers What are
the organization's assets
What is NOT a benefit of a qualitative Risk Analysis?
uses the opinions of the experts
is easy to complete
