Page | 1
ITN 260 Module 15 Review, ITN 260
Module 13 Review, ITN 260 Module 12
Review Questions with Detailed
Verified Answers
Question: Which of the following threats would be classified as the actions of
a hactivist?
a. Environmental threat
b. External threat
c. Compliance threat
d. Internal threat
Ans: External Threat
Question: Which of these is NOT a response to risk?
a. Mitigation
b. Transference
c. Resistance
d. Avoidance
Ans: Resistance
Question: Which of the following is NOT a threat classification category?
, Page | 2
a. Financial
b. Compliance
c. Strategic
d. Tactical
Ans: Tactical
Question: In which of the following threat classifications would a power
blackout be classified?
a. Operational
b. Technical
c. Strategic
d. Managerial
Ans: Operational
Question: Which of the following approaches to risk calculation typically
assigns a numeric value (1-10) or label (High, Medium, or Low) to represent a
risk?
a. Quantitative risk calculation
b. Rule-based risk calculation
c. Policy-based risk calculation
d. Qualitative risk calculation
, Page | 3
Ans: Qualitative risk calculation
Question: What is a list of potential threats and associated risks?
a. Risk matrix
b. Risk portfolio
c. Risk register
d. Risk assessment
Ans: Risk Register
Question: Giovanni is completing a report on risks. To which risk option would
he classify the action that the organization has decided not to construct a new
a data center because it would be located in an earthquake zone?
a. Transference
b. Prevention
c. Avoidance
d. Rejection
Ans: Avoidance
Question: Which of the following control categories includes conducting
workshops to help users resist phishing attacks?
a. Technical
b. Operational
c. Managerial
ITN 260 Module 15 Review, ITN 260
Module 13 Review, ITN 260 Module 12
Review Questions with Detailed
Verified Answers
Question: Which of the following threats would be classified as the actions of
a hactivist?
a. Environmental threat
b. External threat
c. Compliance threat
d. Internal threat
Ans: External Threat
Question: Which of these is NOT a response to risk?
a. Mitigation
b. Transference
c. Resistance
d. Avoidance
Ans: Resistance
Question: Which of the following is NOT a threat classification category?
, Page | 2
a. Financial
b. Compliance
c. Strategic
d. Tactical
Ans: Tactical
Question: In which of the following threat classifications would a power
blackout be classified?
a. Operational
b. Technical
c. Strategic
d. Managerial
Ans: Operational
Question: Which of the following approaches to risk calculation typically
assigns a numeric value (1-10) or label (High, Medium, or Low) to represent a
risk?
a. Quantitative risk calculation
b. Rule-based risk calculation
c. Policy-based risk calculation
d. Qualitative risk calculation
, Page | 3
Ans: Qualitative risk calculation
Question: What is a list of potential threats and associated risks?
a. Risk matrix
b. Risk portfolio
c. Risk register
d. Risk assessment
Ans: Risk Register
Question: Giovanni is completing a report on risks. To which risk option would
he classify the action that the organization has decided not to construct a new
a data center because it would be located in an earthquake zone?
a. Transference
b. Prevention
c. Avoidance
d. Rejection
Ans: Avoidance
Question: Which of the following control categories includes conducting
workshops to help users resist phishing attacks?
a. Technical
b. Operational
c. Managerial