INDIVIDUAL MANAGE YOUR RISK QHS FINAL
EXAM STUDY GUIDE 2026 TESTED ITEMS
SOLVED
◉ Threat. Answer: Any activity that represents a possible danger
◉ Vulnerability. Answer: A weakness
◉ Asset. Answer: A thing of value worth protecting
◉ Impact of loss. Answer: A loss resulting in a compromise to
business functions or assets
◉ CIA Triangle. Answer: Confidentiality, Integrity, Availability
◉ Exploit. Answer: The act of initiating a vulnerability. It occurs
when a command or program is executed to take advantage of a
weakness.
◉ Tangible value. Answer: Often monetary, can be quantified and
measured easily
, ◉ Intangible value. Answer: Value that cannot be measured by cost
such as client confidence or company reputation
◉ Policies. Answer: Formal statements issued by the leaders
◉ Standards. Answer: Mandatory rules written to support or
provide some direction to policies
◉ Guidelines. Answer: Not mandatory but provide guidance on
specific behavior
◉ LAN. Answer: Local area network, inside the firewall
◉ LAN-to-WAN Domain. Answer: Where the IT infrastructure links
to a wide area network and the Internet
◉ Cost Benefit Analysis (CBA). Answer: Compares the business
impact with the cost to implement a security control
◉ Lost opportunity costs. Answer: Money spent to reduce risks can't
be spent elsewhere
◉ Business Continuity Plan (BCP). Answer: A comprehensive plan
that helps a company prepare for different types of emergencies. Its
EXAM STUDY GUIDE 2026 TESTED ITEMS
SOLVED
◉ Threat. Answer: Any activity that represents a possible danger
◉ Vulnerability. Answer: A weakness
◉ Asset. Answer: A thing of value worth protecting
◉ Impact of loss. Answer: A loss resulting in a compromise to
business functions or assets
◉ CIA Triangle. Answer: Confidentiality, Integrity, Availability
◉ Exploit. Answer: The act of initiating a vulnerability. It occurs
when a command or program is executed to take advantage of a
weakness.
◉ Tangible value. Answer: Often monetary, can be quantified and
measured easily
, ◉ Intangible value. Answer: Value that cannot be measured by cost
such as client confidence or company reputation
◉ Policies. Answer: Formal statements issued by the leaders
◉ Standards. Answer: Mandatory rules written to support or
provide some direction to policies
◉ Guidelines. Answer: Not mandatory but provide guidance on
specific behavior
◉ LAN. Answer: Local area network, inside the firewall
◉ LAN-to-WAN Domain. Answer: Where the IT infrastructure links
to a wide area network and the Internet
◉ Cost Benefit Analysis (CBA). Answer: Compares the business
impact with the cost to implement a security control
◉ Lost opportunity costs. Answer: Money spent to reduce risks can't
be spent elsewhere
◉ Business Continuity Plan (BCP). Answer: A comprehensive plan
that helps a company prepare for different types of emergencies. Its
