Compliance and Risk Management Final
Exam Review UPDATED ACTUAL Exam
Questions and CORRECT Answers
How can you determine the importance of a system?
-By when the system was last updated
-By why the system functions
-By what the organization does
-By how the system is used - CORRECT ANSWER - By how the system is used
Failover cluster is often used to protect critical system functions and data by eliminating
__________.
-Single Point of Failure
-Nodes
-Redundancy
-Operational Availability - CORRECT ANSWER - Single point of Failure
Protecting software assets can be accomplished by minimizing the different types of software to
create standardization making it easy to push patches and manage software versions.
-True
-False - CORRECT ANSWER - True
What are benefits to implementing automation?
-Value to customer
,-Value to company
-Protecting data
-All the above - CORRECT ANSWER - All of the above
Determining which systems require 99.999 percent access and availability can be done by
identifying the value of the service provided.
True
False - CORRECT ANSWER - True
A mission-critical system is any system that must continue to run to ensure a business continues
to function.
True
False - CORRECT ANSWER - True
What is the difference between data mining and data warehousing?
-Data mining extracts useful patterns and insights whereas data warehousing organizes large
amounts of data.
-Data warehousing extracts useful patterns and insights whereas data mining organizes large
amounts of data.
-Data warehousing and data mining are synonymous terms.
-None of the above - CORRECT ANSWER - Data mining extracts useful patterns and
insights whereas data warehousing organizes large amounts of data.
User domain refers to which of the following?
-Includes PCs so risk includes theft and updates
-Includes personal data so significant risk is loss of confidentiality.
, -Includes connection to internet so risk to provide protection to external threats via firewalls
-Include VPN via tunnel protocols with strict access control protocols - CORRECT
ANSWER - Includes personal data so significant risk is loss of confidentiality.
Based upon a 2019 General Accounting Office audit, all federal government agencies have
successfully implemented risk managment policies.
-True
-False - CORRECT ANSWER - False
Based upon a 2019 General Accounting Office audit, Federal Agencies noted decentralized or
federated organizations create difficulty in implementing standardized IT and effective
cybersecurity programs.
-True
-False - CORRECT ANSWER - True
What characteristic is common to risk assessments and threat assessments?
-They are both ongoing processes
-They are both automated processes
-They are both performed for a specific time.
-They are both manual processes - CORRECT ANSWER - -They are both performed for a
specific time.
You are reviewing historical data in an attempt to identify potential threats to your business.
What would not be helpful to you in this process?
-Reading news articles about thefts that occurred last year in a different part of the U.S.
-Understand the limitations of your network and IT architecture
Exam Review UPDATED ACTUAL Exam
Questions and CORRECT Answers
How can you determine the importance of a system?
-By when the system was last updated
-By why the system functions
-By what the organization does
-By how the system is used - CORRECT ANSWER - By how the system is used
Failover cluster is often used to protect critical system functions and data by eliminating
__________.
-Single Point of Failure
-Nodes
-Redundancy
-Operational Availability - CORRECT ANSWER - Single point of Failure
Protecting software assets can be accomplished by minimizing the different types of software to
create standardization making it easy to push patches and manage software versions.
-True
-False - CORRECT ANSWER - True
What are benefits to implementing automation?
-Value to customer
,-Value to company
-Protecting data
-All the above - CORRECT ANSWER - All of the above
Determining which systems require 99.999 percent access and availability can be done by
identifying the value of the service provided.
True
False - CORRECT ANSWER - True
A mission-critical system is any system that must continue to run to ensure a business continues
to function.
True
False - CORRECT ANSWER - True
What is the difference between data mining and data warehousing?
-Data mining extracts useful patterns and insights whereas data warehousing organizes large
amounts of data.
-Data warehousing extracts useful patterns and insights whereas data mining organizes large
amounts of data.
-Data warehousing and data mining are synonymous terms.
-None of the above - CORRECT ANSWER - Data mining extracts useful patterns and
insights whereas data warehousing organizes large amounts of data.
User domain refers to which of the following?
-Includes PCs so risk includes theft and updates
-Includes personal data so significant risk is loss of confidentiality.
, -Includes connection to internet so risk to provide protection to external threats via firewalls
-Include VPN via tunnel protocols with strict access control protocols - CORRECT
ANSWER - Includes personal data so significant risk is loss of confidentiality.
Based upon a 2019 General Accounting Office audit, all federal government agencies have
successfully implemented risk managment policies.
-True
-False - CORRECT ANSWER - False
Based upon a 2019 General Accounting Office audit, Federal Agencies noted decentralized or
federated organizations create difficulty in implementing standardized IT and effective
cybersecurity programs.
-True
-False - CORRECT ANSWER - True
What characteristic is common to risk assessments and threat assessments?
-They are both ongoing processes
-They are both automated processes
-They are both performed for a specific time.
-They are both manual processes - CORRECT ANSWER - -They are both performed for a
specific time.
You are reviewing historical data in an attempt to identify potential threats to your business.
What would not be helpful to you in this process?
-Reading news articles about thefts that occurred last year in a different part of the U.S.
-Understand the limitations of your network and IT architecture
