ISSC 363 Week 2 Quiz 2

ISSC 363 Week 2 Quiz 2 Week 2 Quiz Return to Assessment List Comment: Great job on the quiz! Part 1 of 1 - 95.0/ 100.0 Points Question 1 of 20 5.0/ 5.0 Points Which of the following statements best describes risk? A. The probability of loss of a valued resource B. An error or weakness in the security system C.A negative effect or influence on an information system D.An external situation or event with the potential to cause harm to an IT system Feedback: pg. 4 Question 2 of 20 5.0/ 5.0 Points In which of the IT domains is a hub considered a major component of risk? A.User Domain B.Workstation Domain C.LAN-WAN Domain D.LAN Domain Feedback: pg. 10 Question 3 of 20 5.0/ 5.0 Points How does risk management impact an organization? A.Affects the survivability B.Increases the profitability Feedback: pg. 14-15 Question 4 of 20 5.0/ 5.0 Points Which of the following is not a technique for dealing with vulnerabilities? A.System logs B.Audits C.Cost-benefit analysis D.Accreditation Feedback: pg. 25 Question 5 of 20 5.0/ 5.0 Points Which of the following statements about threats is not accurate? A. Threats are always present. B. Threats can be eliminated completely. C. Appropriate actions can reduce the chances of occurrence of threats. D.Appropriate actions can reduce the impact of a threat but not the threat itself. Feedback: pg. 12 Question 6 of 20 5.0/ 5.0 Points What would you most commonly do to reduce the potential risk from a threat/vulnerability pair? A. Reduce the vulnerability B. Reduce the threat Feedback: pg. 37 Question 7 of 20 5.0/ 5.0 Points After implementing several security controls, what should be done to ensure the controls are performing as expected? A.Continuous monitoring B.Remove existing controls C.Configuration management D.Version control