Cyber security and Information Assurance Comprehensive Questions (Frequently Tested)with Verified Answers Graded A+

Cyber security and
Information Assurance
Comprehensive Questions
(Frequently Tested)with
Verified Answers Graded
A+User [Date] [Course title]

, Contact for further consultation




1. Risk Answer: is the likelihood that a threat agent will exploit a vulnerability and the associated impact

2. Managing Risk Answer: means identifying, assessing, prioritizing, and treating (responding

to) risk; monitoring the evolving situation, and continuing the process

3. Risk Assessment Answer: means "the process of identifying, estimating, and prioritizing

information security risks."

4. What does risk assessment include? Answer: *Identify threats

*Estimate the likelihood of being targeted

*Identify vulnerabilities

*Estimate the impact/harm should a threat successfully exploit a vulnerability

*Estimate the likelihood that the harm will occur

*Estimate risk as a function of the degree of harm and the likelihood that it will occur

5. Responding/Treating Risk

Answer: Avoid Mitigate

Transfer

Accept

6. Avoid (Risk) Answer: Discontinue risky

practice (decommission insecure system or prohibit
2/
13