CTS 1120 - FINAL
EXAM (MULTIPLE
CHOICE) QUESTIONS &
ANSWERS VERIFIED
100% CORRECT!!
CTS 1120
Evatee 9/26/24 CTS 1120
,CTS 1120 - FINAL EXAM (MULTIPLE CHOICE)
QUESTIONS & ANSWERS VERIFIED 100%
CORRECT!!
What a key principle of risk management programs? Answer - Don't spend
more to protect an asset than it is worth.
Adam is evaluating the security of a web server before it goes live. He believes
that an issue in the code allows an SQL injection attack against the server. What
term describes the issue that Adam discovered? Answer - Vulnerability
Adam's company recently suffered an attack where hackers exploited an SQL
injection issue on their web server and stole sensitive information from a
database. What term describes this activity? Answer - Incident
Joe is responsible for the security of the industrial control systems for a power
plant. What type of environment does Joe administer? Answer - Supervisory
Control and Data Acquisition (SCADA)
Beth is conducting a risk assessment. She is trying to determine the impact a
security incident will have on the reputation of her company. What type of risk
assessment is best suited to this type of analysis? Answer - Qualitative
Kim is the risk manager for a large organization. She is evaluating whether the
organization should purchase a fire suppression system. She consulted a variety
of subject matter experts and determined that there is a 1 percent chance that
a fire will occur in a given year. If a fire occurred, it would likely cause $2 million
in damage to the facility, which has a $10 million value. Given this scenario,
what is the exposure factor? Answer - 20 percent
, Kim is the risk manager for a large organization. She is evaluating whether the
organization should purchase a fire suppression system. She consulted a variety
of subject matter experts and determined that there is a 1 percent chance that
a fire will occur in a given year. If a fire occurred, it would likely cause $2 million
in damage to the facility, which has a $10 million value. Given this scenario,
what is the single loss expectancy (SLE)? Answer - $2,000,000
Kim is the risk manager for a large organization. She is evaluating whether the
organization should purchase a fire suppression system. She consulted a variety
of subject matter experts and determined that there is a 1 percent chance that
a fire will occur in a given year. If a fire occurred, it would likely cause $2 million
in damage to the facility, which has a $10 million value. Given this scenario,
what is the annualized loss expectancy (ALE)? Answer - $20,000
Purchasing an insurance policy is an example of the ____________ risk
management strategy. Answer - transfer
Alan is the security manager for a mid-sized business. The company has
suffered several serious data losses when mobile devices were stolen. Alan
decides to implement full disk encryption on all mobile devices. What risk
response did Alan take? Answer - Reduce
What term describes the risk that exists after an organization has performed all
planned countermeasures and controls? Answer - Residual risk
Violet deploys an intrusion prevention system (IPS) on her network as a
security control. What type of control has Violet deployed? Answer -
Preventive
EXAM (MULTIPLE
CHOICE) QUESTIONS &
ANSWERS VERIFIED
100% CORRECT!!
CTS 1120
Evatee 9/26/24 CTS 1120
,CTS 1120 - FINAL EXAM (MULTIPLE CHOICE)
QUESTIONS & ANSWERS VERIFIED 100%
CORRECT!!
What a key principle of risk management programs? Answer - Don't spend
more to protect an asset than it is worth.
Adam is evaluating the security of a web server before it goes live. He believes
that an issue in the code allows an SQL injection attack against the server. What
term describes the issue that Adam discovered? Answer - Vulnerability
Adam's company recently suffered an attack where hackers exploited an SQL
injection issue on their web server and stole sensitive information from a
database. What term describes this activity? Answer - Incident
Joe is responsible for the security of the industrial control systems for a power
plant. What type of environment does Joe administer? Answer - Supervisory
Control and Data Acquisition (SCADA)
Beth is conducting a risk assessment. She is trying to determine the impact a
security incident will have on the reputation of her company. What type of risk
assessment is best suited to this type of analysis? Answer - Qualitative
Kim is the risk manager for a large organization. She is evaluating whether the
organization should purchase a fire suppression system. She consulted a variety
of subject matter experts and determined that there is a 1 percent chance that
a fire will occur in a given year. If a fire occurred, it would likely cause $2 million
in damage to the facility, which has a $10 million value. Given this scenario,
what is the exposure factor? Answer - 20 percent
, Kim is the risk manager for a large organization. She is evaluating whether the
organization should purchase a fire suppression system. She consulted a variety
of subject matter experts and determined that there is a 1 percent chance that
a fire will occur in a given year. If a fire occurred, it would likely cause $2 million
in damage to the facility, which has a $10 million value. Given this scenario,
what is the single loss expectancy (SLE)? Answer - $2,000,000
Kim is the risk manager for a large organization. She is evaluating whether the
organization should purchase a fire suppression system. She consulted a variety
of subject matter experts and determined that there is a 1 percent chance that
a fire will occur in a given year. If a fire occurred, it would likely cause $2 million
in damage to the facility, which has a $10 million value. Given this scenario,
what is the annualized loss expectancy (ALE)? Answer - $20,000
Purchasing an insurance policy is an example of the ____________ risk
management strategy. Answer - transfer
Alan is the security manager for a mid-sized business. The company has
suffered several serious data losses when mobile devices were stolen. Alan
decides to implement full disk encryption on all mobile devices. What risk
response did Alan take? Answer - Reduce
What term describes the risk that exists after an organization has performed all
planned countermeasures and controls? Answer - Residual risk
Violet deploys an intrusion prevention system (IPS) on her network as a
security control. What type of control has Violet deployed? Answer -
Preventive
