ISSC 363 Quiz 2

ISSC 363 Quiz 2 Question 1 of 20 5.0/ 5.0 Points Why is a risk assessment valuable for an organization? A. Helps protect assets B. Helps plan employee vacation timing C.Identifies future capital investments D.Helps protect management Feedback: pg. 114 Question 2 of 20 5.0/ 5.0 Points Which of the following statements regarding a risk assessment (RA) is true? A. An RA is an ongoing process B. An RA provides an assessment for a point in time C. Ideally an RA will not be limited by a scope D. An RA is designed to eliminate risk Feedback: pg. 114 Question 3 of 20 5.0/ 5.0 Points What type of risk assessment uses a subjective method to assess a risk? A.Quantitative B.Ongoing C.Probability-based D.Qualitative Feedback: pg. 118 Question 4 of 20 5.0/ 5.0 Points What type of risk assessment uses terms such as ALE, SLE, and ARO? A.Quantitative B.Risk Matrix C.Delphi D.Qualitative Feedback: pg. 118 Question 5 of 20 5.0/ 5.0 Points A company issues laptop computers to 100 employees. The value of each laptop including hardware, software, and data is $1,000. On average, employees lose one laptop a month. Management determines that it can purchase hardware locks for a total of $1,000 and reduce the number of lost laptops to one per year. Should they purchase the locks? A. Yes, because the savings is greater than the cost of the control. B. Yes, because the cost of the control is greater than the savings. C. No, because the savings is greater than the cost of the control. D. No, because the cost of the control is greater than the savings. Feedback: pg. 118-119 Question 6 of 20 5.0/ 5.0 Points Which of the following is not a step within a risk assessment? A. Identify assets B. Identify threats and vulnerabilities C. Identify countermeasures D.Implement countermeasures Feedback: pg. 139