CIT 594 FINAL ACTUAL TEST PAPER
COMPLETE ANSWER GUIDE GUARANTEED
TO PASS REVIEW MATERIAL
⩥ True or false? Admiral Poindexter's NSDD-145 gave the defense and
national security communities control over securing private sector
companies.
Answer: True
⩥ True or false? The Morris Worm that did $100 million in damage was
created to measure the size of the Internet and was not intended to do
damage.
Answer: True
⩥ True or false? Risk Management is the practice at the heart of
cybersecurity.
Answer: True
⩥ Which is NOT something that Risk Management tries to identify as
critical assets of: Individual, Organization, Company, Family?
Answer: Family
,⩥ True or false? The National Institute for Standards and Technology
(NIST) standards and procedures establish baselines for the deployment
of products or services across an industry.
Answer: True
⩥ Which of these are NOT part of the Risk Management Process:
Framing, Responding, Monitoring, Managing?
Answer: Managing
⩥ True or false? The first step in the cyber risk management process is
risk framing.
Answer: True
⩥ True or false? Risk constraints let managers execute a 100 percent
secure risk management plan.
Answer: False
⩥ The degree to which an organization can handle or incur a specific
harm is: Risk Constraint, Risk tolerance, Priorities trade-offs, Risk
framing?
Answer: Risk tolerance
,⩥ Which is an effective method of determining the level and likelihood
of risk: Human reliability analysis, statistical modeling, Event tree
analysis, Survey design, None of the above, All of the above?
Answer: All of the above
⩥ True or false? Professional risk managers are charged with breaking
down and analyzing threats, vulnerabilities, and consequences as
separate factors in a risk assessment.
Answer: True
⩥ True or false? A quantitative risk determination approaches risk using
past records and data, patterns of dates, behavior of technology, behavior
of personnel, and interviews with personnel may all be sources that play
into the determination of a risk's level and/or likelihood.
Answer: False
⩥ Which of these are NOT part of a Risk Response plan: Manage,
Avoid, Mitigates, Transfers Risk?
Answer: Manage
⩥ True or false? Risk Avoidance is a strategy to contain an imminent or
current incident.
Answer: False
, ⩥ True or false? Cybersecurity insurance is an example of Risk transfer.
Answer: True
⩥ True or false? The final stage in the cyber risk management process is
risk monitoring and takes place after the response plan has been
implemented.
Answer: True
⩥ Which of the following is NOT an element of risk framing: Tolerance,
Trade-offs, Threat assessment, Constraints?
Answer: Threat assessment
⩥ Which of the following is NOT an element of risk response: Avoid,
Mitigate, Manage, Transfer?
Answer: Manage
⩥ What does PRA model focus on: Magnitude and severity of risk, The
consequence assessment, The probability of risk occurring, Risk
response?
Answer: The probability of risk occurring
⩥ True or false? You should knowingly open emails that are delivered to
you spam folder?
Answer: False
COMPLETE ANSWER GUIDE GUARANTEED
TO PASS REVIEW MATERIAL
⩥ True or false? Admiral Poindexter's NSDD-145 gave the defense and
national security communities control over securing private sector
companies.
Answer: True
⩥ True or false? The Morris Worm that did $100 million in damage was
created to measure the size of the Internet and was not intended to do
damage.
Answer: True
⩥ True or false? Risk Management is the practice at the heart of
cybersecurity.
Answer: True
⩥ Which is NOT something that Risk Management tries to identify as
critical assets of: Individual, Organization, Company, Family?
Answer: Family
,⩥ True or false? The National Institute for Standards and Technology
(NIST) standards and procedures establish baselines for the deployment
of products or services across an industry.
Answer: True
⩥ Which of these are NOT part of the Risk Management Process:
Framing, Responding, Monitoring, Managing?
Answer: Managing
⩥ True or false? The first step in the cyber risk management process is
risk framing.
Answer: True
⩥ True or false? Risk constraints let managers execute a 100 percent
secure risk management plan.
Answer: False
⩥ The degree to which an organization can handle or incur a specific
harm is: Risk Constraint, Risk tolerance, Priorities trade-offs, Risk
framing?
Answer: Risk tolerance
,⩥ Which is an effective method of determining the level and likelihood
of risk: Human reliability analysis, statistical modeling, Event tree
analysis, Survey design, None of the above, All of the above?
Answer: All of the above
⩥ True or false? Professional risk managers are charged with breaking
down and analyzing threats, vulnerabilities, and consequences as
separate factors in a risk assessment.
Answer: True
⩥ True or false? A quantitative risk determination approaches risk using
past records and data, patterns of dates, behavior of technology, behavior
of personnel, and interviews with personnel may all be sources that play
into the determination of a risk's level and/or likelihood.
Answer: False
⩥ Which of these are NOT part of a Risk Response plan: Manage,
Avoid, Mitigates, Transfers Risk?
Answer: Manage
⩥ True or false? Risk Avoidance is a strategy to contain an imminent or
current incident.
Answer: False
, ⩥ True or false? Cybersecurity insurance is an example of Risk transfer.
Answer: True
⩥ True or false? The final stage in the cyber risk management process is
risk monitoring and takes place after the response plan has been
implemented.
Answer: True
⩥ Which of the following is NOT an element of risk framing: Tolerance,
Trade-offs, Threat assessment, Constraints?
Answer: Threat assessment
⩥ Which of the following is NOT an element of risk response: Avoid,
Mitigate, Manage, Transfer?
Answer: Manage
⩥ What does PRA model focus on: Magnitude and severity of risk, The
consequence assessment, The probability of risk occurring, Risk
response?
Answer: The probability of risk occurring
⩥ True or false? You should knowingly open emails that are delivered to
you spam folder?
Answer: False
