Question 1

Risk _________ defines the quantity and nature of risk that organizations are willing to accept as they evaluate the trade-offs between perfect security and unlimited accessibility.

Accepted Answer

A)   benefit
B)   appetite 
C)   acceptance
D)   avoidance

Question 2

The __________ control strategy attempts to shift risk to other assets, other processes, or other organizations.

Accepted Answer

A)   transference
B)   defense 
C)   acceptance
D)   mitigation

Question 3

Federal agencies such as the NSA, FBI, and CIA use specialty classification schemes.For materials that are not considered "National Security Information," __________ data is the lowest-level classification.

Accepted Answer

A)   sensitive
B)   confidential 
C)   unclassified
D)   public

Question 4

According to Sun Tzu, if you know yourself and know your enemy, you have an average chance to be successful in an engagement.

Accepted Answer

A) True 
 B)False

Question 5

____________________ measures are generally less focused on numbers and are more strategic than metrics-based measures.

Accepted Answer

The answer of ____________________ measures are generally less focused on...

Question 6

The calculation of the likelihood of an attack coupled with the attack frequency to determine the expected number of losses within a specified time range is called the __________.

Accepted Answer

A)   loss frequency
B)   annualized loss expectancy 
C)   likelihood
D)   benefit of loss

Question 7

Each of the threats faced by an organization must be evaluated, including determining the threat's potential to endanger the organization, which is known as a threat prioritization. _________________________

Accepted Answer

A) True 
 B)False

Question 8

The first phase of risk management is _________.

Accepted Answer

A)   risk identification
B)   design 
C)   risk control
D)   risk evaluation

Exam 5: Risk Management

The __________ control strategy attempts to shift risk to other assets, other processes, or other organizations.

Correct Answer
verified

Each of the threats faced by an organization must be evaluated, including determining the threat's potential to endanger the organization, which is known as a threat prioritization. _________________________

Correct Answer
verified

Federal agencies such as the NSA, FBI, and CIA use specialty classification schemes.For materials that are not considered "National Security Information," __________ data is the lowest-level classification.

Correct Answer
verified

According to Sun Tzu, if you know yourself and know your enemy, you have an average chance to be successful in an engagement.

Correct Answer
verified

Risk _________ defines the quantity and nature of risk that organizations are willing to accept as they evaluate the trade-offs between perfect security and unlimited accessibility.

Correct Answer
verified

The calculation of the likelihood of an attack coupled with the attack frequency to determine the expected number of losses within a specified time range is called the __________.

Correct Answer
verified

The first phase of risk management is _________.

Correct Answer
verified

____________________ measures are generally less focused on numbers and are more strategic than metrics-based measures.

Correct Answer
verified

Exam 5: Risk Management

The __________ control strategy attempts to shift risk to other assets, other processes, or other organizations.

Correct AnswerverifiedShow Answer

Each of the threats faced by an organization must be evaluated, including determining the threat's potential to endanger the organization, which is known as a threat prioritization. _________________________

Correct AnswerverifiedShow Answer

Federal agencies such as the NSA, FBI, and CIA use specialty classification schemes.For materials that are not considered "National Security Information," __________ data is the lowest-level classification.

Correct AnswerverifiedShow Answer

According to Sun Tzu, if you know yourself and know your enemy, you have an average chance to be successful in an engagement.

Correct AnswerverifiedShow Answer

Risk _________ defines the quantity and nature of risk that organizations are willing to accept as they evaluate the trade-offs between perfect security and unlimited accessibility.

Correct AnswerverifiedShow Answer

The calculation of the likelihood of an attack coupled with the attack frequency to determine the expected number of losses within a specified time range is called the __________.

Correct AnswerverifiedShow Answer

The first phase of risk management is _________.

Correct AnswerverifiedShow Answer

____________________ measures are generally less focused on numbers and are more strategic than metrics-based measures.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified