Fundamentals of Cyber Risk
Management 2025/2026 Exam All
Answers and Illustrations Given
In the Incident Response Life Cycle, which of the following phases would
identifying precursors and indication be expected? - 🧠 ANSWER ✔✔B.
Detection and Analysis
Establishing the context and providing common perspective on how
organizations manage risk is the goal of: - 🧠 ANSWER ✔✔B. Risk Framing
A decision made based upon business knowledge, executive management
directives, historical perspectives, business goals, and environmental
factors is known as: - 🧠 ANSWER ✔✔C. Judgmental valuation
Which security principle is concerned with the unauthorized modification of
important or sensitive information? - 🧠 ANSWER ✔✔B. Integrity
In relation to risk management, people, information, technology, and
facilities are examples of: - 🧠 ANSWER ✔✔A. Assets
COPYRIGHT©NINJANERD 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
1
, Which of the following is the set of security controls for an information
system that is primarily implemented and executed by people? - 🧠
ANSWER ✔✔A. Operational Controls
Methods of response for managing risks are: - 🧠 ANSWER ✔✔D. Accept,
Transfer, Mitigate, Avoid
The inputs (threat source motivation, threat capacity, nature of vulnerability,
and current controls) will aid in generating output used in which step of the
NIST SP risk assessment guidance? - 🧠 ANSWER ✔✔D. Likelihood
Determination
Which OCTAVE process involves collecting information about important
assets, security requirements, threats, current organizational strengths, and
vulnerabilities from managers of selected operational areas? - 🧠 ANSWER
✔✔A. Identify Operational Area Knowledge
If the cost of controls to mitigate a risk exceeds the cost of loss the
organization would incur if a threat is realized, the decision may be made to
accept the risk. - 🧠 ANSWER ✔✔A. TRUE
COPYRIGHT©NINJANERD 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
2
Management 2025/2026 Exam All
Answers and Illustrations Given
In the Incident Response Life Cycle, which of the following phases would
identifying precursors and indication be expected? - 🧠 ANSWER ✔✔B.
Detection and Analysis
Establishing the context and providing common perspective on how
organizations manage risk is the goal of: - 🧠 ANSWER ✔✔B. Risk Framing
A decision made based upon business knowledge, executive management
directives, historical perspectives, business goals, and environmental
factors is known as: - 🧠 ANSWER ✔✔C. Judgmental valuation
Which security principle is concerned with the unauthorized modification of
important or sensitive information? - 🧠 ANSWER ✔✔B. Integrity
In relation to risk management, people, information, technology, and
facilities are examples of: - 🧠 ANSWER ✔✔A. Assets
COPYRIGHT©NINJANERD 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
1
, Which of the following is the set of security controls for an information
system that is primarily implemented and executed by people? - 🧠
ANSWER ✔✔A. Operational Controls
Methods of response for managing risks are: - 🧠 ANSWER ✔✔D. Accept,
Transfer, Mitigate, Avoid
The inputs (threat source motivation, threat capacity, nature of vulnerability,
and current controls) will aid in generating output used in which step of the
NIST SP risk assessment guidance? - 🧠 ANSWER ✔✔D. Likelihood
Determination
Which OCTAVE process involves collecting information about important
assets, security requirements, threats, current organizational strengths, and
vulnerabilities from managers of selected operational areas? - 🧠 ANSWER
✔✔A. Identify Operational Area Knowledge
If the cost of controls to mitigate a risk exceeds the cost of loss the
organization would incur if a threat is realized, the decision may be made to
accept the risk. - 🧠 ANSWER ✔✔A. TRUE
COPYRIGHT©NINJANERD 2025/2026. YEAR PUBLISHED 2025. COMPANY REGISTRATION NUMBER: 619652435. TERMS OF USE. PRIVACY
STATEMENT. ALL RIGHTS RESERVED
2
