CPSA Study Notes Exam Questions & Answers(Graded A+)

Risk Assessment is done based on (Format: 1. answer 2. answer etc) - ANSWER-1. Asset value 2. Vulnerability 3. Threat 4. Probability 5. Impact The steps involved in Risk Assessment are (Format: 1. R 2. V 3. P) - ANSWER-1. Resource Identification 2. Vulnerability and threat identification 3. Probability and impact analysis Define resource - ANSWER-Anything of value to a company A vulnerability is a security hole or weakness in a system, these include: (Format: 1. answer 2. answer etc) - ANSWER-1. Errors in code 2. Misconfiguration 3. Inadequate access control 4. Inadequate natural disaster protection 5. Social engineering A threat is the circumstances or activities that may use vulnerabilities on resources. These include: (Format: 1, 2 and 3) Order: E, D and H - ANSWER-External, Deliberate actions and Human error Name the 4 methods of dealing with Risk (Format: 1, 2, 3 and 4) Order: M, A, T and Ac - ANSWER-Mitigation, Avoidance, Transference and Acceptance