Module 15 Information Security
Management Question and answers
risk tolerance
already passed 2025/2026
1. Gabe is creating a report for his supervisor Cora
that outlines the total risk that the organization
can bear in a given risk profile. Which of the asset enumeration
following terms would Gabe be using?
2. Which of the following is a listing of assets by a
seller of those assets?
3. Giovanni is completing a report on risks. To which risk avoid
option would he classify the action that the organiza-
tion has decided not to construct a new data center
because it would be located in an earthquake zone?
4. Which of the following approaches to risk qualitative
calculation typically assigns a numeric value (1-10)
or label (High, Medium, or Low) to represent a
risk?
5. Aristide is explaining to a coworker the new It is designed to replace
cyberse- curity asset management (CAM) system.
Which of the following would he NOT say about a asset management
CAM?
6. Which of these is NOT a response to risk? resist
7. Which of the following is NOT a third-party risk? network assignment
8. Emiliano needs to determine the expected SLE
monetary loss every time a risk occurs. Which
formula will he use?
9. Enzo is reviewing asset tracking for a
certification exam. Which of the following is NOT Asset tracking traces
true about asset tracking?
the location of
intangible as- sets.
10. risk register
1/
3
Management Question and answers
risk tolerance
already passed 2025/2026
1. Gabe is creating a report for his supervisor Cora
that outlines the total risk that the organization
can bear in a given risk profile. Which of the asset enumeration
following terms would Gabe be using?
2. Which of the following is a listing of assets by a
seller of those assets?
3. Giovanni is completing a report on risks. To which risk avoid
option would he classify the action that the organiza-
tion has decided not to construct a new data center
because it would be located in an earthquake zone?
4. Which of the following approaches to risk qualitative
calculation typically assigns a numeric value (1-10)
or label (High, Medium, or Low) to represent a
risk?
5. Aristide is explaining to a coworker the new It is designed to replace
cyberse- curity asset management (CAM) system.
Which of the following would he NOT say about a asset management
CAM?
6. Which of these is NOT a response to risk? resist
7. Which of the following is NOT a third-party risk? network assignment
8. Emiliano needs to determine the expected SLE
monetary loss every time a risk occurs. Which
formula will he use?
9. Enzo is reviewing asset tracking for a
certification exam. Which of the following is NOT Asset tracking traces
true about asset tracking?
the location of
intangible as- sets.
10. risk register
1/
3
