SANS Security's Foundation UPDATED ACTUAL Questions and CORRECT
Answers
Which Risk Strategy involves buying insurance?
The elements of the CIA are
Which role always has ultimate responsibility for security
in an organization?
What is the goal of most Cyber Threats today?
What is the name of the role with primary responsibility
for data?
What role is responsible for implementing controls on
data?
The term due care means that senior management has a
legal responsibility to
Who in the organization determines if risk is acceptable?
The term Exposure Factor means
The term Single Loss Expectancy means
The formula to arrive at Annual Loss Expectancy is
The formula to arrive at Single Loss Expectancy is
Which approach to Risk Assessment is based on money?
Which approach to Risk Assessment is based on severity
and likelihood?
Of the three control areas, which deals with authentica-
tion?
Of the three control types, which deals with authentica-
tion?
Which Risk Strategy deals with stopping risky activities or
business practices?
, Preventive
Confidentiality, Integrity,
AvailabilitySenior Manager Risk Avoidance
Make money for the Risk Transference
attackerData Owner
Data Custodian
Act as a reasonable person would act in protecting
assetsChief Executive Oflcer (CEO)
The percentage of asset value loss
What is costs each time a threat
materializes
Annual Rate of Occurance * Single Loss
ExpectancyAsset Value * Exposure Factor
Quantitati
ve
Qualitativ
e
Technical Controls
2/4
Answers
Which Risk Strategy involves buying insurance?
The elements of the CIA are
Which role always has ultimate responsibility for security
in an organization?
What is the goal of most Cyber Threats today?
What is the name of the role with primary responsibility
for data?
What role is responsible for implementing controls on
data?
The term due care means that senior management has a
legal responsibility to
Who in the organization determines if risk is acceptable?
The term Exposure Factor means
The term Single Loss Expectancy means
The formula to arrive at Annual Loss Expectancy is
The formula to arrive at Single Loss Expectancy is
Which approach to Risk Assessment is based on money?
Which approach to Risk Assessment is based on severity
and likelihood?
Of the three control areas, which deals with authentica-
tion?
Of the three control types, which deals with authentica-
tion?
Which Risk Strategy deals with stopping risky activities or
business practices?
, Preventive
Confidentiality, Integrity,
AvailabilitySenior Manager Risk Avoidance
Make money for the Risk Transference
attackerData Owner
Data Custodian
Act as a reasonable person would act in protecting
assetsChief Executive Oflcer (CEO)
The percentage of asset value loss
What is costs each time a threat
materializes
Annual Rate of Occurance * Single Loss
ExpectancyAsset Value * Exposure Factor
Quantitati
ve
Qualitativ
e
Technical Controls
2/4
