Module 15 Information Security
Management Question and answers
correctly solved 2025/2026
Which of the following threats would be classified as the actions of a hacktivist? - correct answer ✔a.
external threat
Which of these is NOT a response to risk? - correct answer ✔c. resist
Which of the following is NOT a threat classification category? - correct answer ✔c. tactical
In which of the following threat classifications would a power blackout be classified? - correct answer
✔a. operational
Which of the following approaches to risk calculation typically assigns a numeric value (1-10) or label
(High, Medium, or Low) to represent a risk? - correct answer ✔b. qualitative
What is a list of potential threats and associated risks called? - correct answer ✔c. risk register
Giovanni is completing a report on risks. To which risk option would he classify the action that the
organization has decided not to construct a new data center because it would be located in an
earthquake zone? - correct answer ✔b. avoid
Aristide is explaining to a coworker the new cybersecurity asset management (CAM) system. Which of
the following would he NOT say about a CAM? - correct answer ✔d. It is designed to replace asset
management.
Management Question and answers
correctly solved 2025/2026
Which of the following threats would be classified as the actions of a hacktivist? - correct answer ✔a.
external threat
Which of these is NOT a response to risk? - correct answer ✔c. resist
Which of the following is NOT a threat classification category? - correct answer ✔c. tactical
In which of the following threat classifications would a power blackout be classified? - correct answer
✔a. operational
Which of the following approaches to risk calculation typically assigns a numeric value (1-10) or label
(High, Medium, or Low) to represent a risk? - correct answer ✔b. qualitative
What is a list of potential threats and associated risks called? - correct answer ✔c. risk register
Giovanni is completing a report on risks. To which risk option would he classify the action that the
organization has decided not to construct a new data center because it would be located in an
earthquake zone? - correct answer ✔b. avoid
Aristide is explaining to a coworker the new cybersecurity asset management (CAM) system. Which of
the following would he NOT say about a CAM? - correct answer ✔d. It is designed to replace asset
management.
