Question 1

Which of the following attributes does NOT apply to software information assets?

Accepted Answer

A)   Serial number
B)   Controlling entity
C)   Manufacturer name
D)   Product dimensionsE) A) and C)
F) All of the above

Question 2

The identification and assessment of levels of risk in an organization describes which of the following?

Accepted Answer

A)   Risk analysis
B)   Risk identification
C)   Risk management
D)   Risk reductionE) None of the above
F) C) and D)

Question 3

The probability that a specific vulnerability within an organization will be the targetof an attack is known as risk.____________

Accepted Answer

A) True 
 B)False

Question 4

The recognition,enumeration,and documentation of risks to anorganization's information assets.is known as risk control.____________ ​

Accepted Answer

A) True 
 B)False

Question 5

How should the initial inventory be used when classifying and categorizing assets?

Accepted Answer

The inventory should reflect the sensiti...

Question 6

Risk ____________ is the process of discovering and assessing the risks to an organization's operations and determining how those risks can be mitigated.

Accepted Answer

The answer of Risk ____________ is the process of discovering...

Question 7

As part of the risk identification process,listing the assets in order of importance can be achieved by using a weighted ____________________ worksheet.

Accepted Answer

factor ana...

Question 8

Two of the activities involved in risk management include identifying risks and assessing risks.Which of the following activities is part of the risk identification process?

Accepted Answer

A)   Determining the likelihood that vulnerable systems will be attacked by specific threats
B)   Calculating the severity of risks to which assets are exposed in their current setting
C)   Assigning a value to each information asset
D)   Documenting and reporting the findings of risk identification and assessmentE) All of the above
F) B) and C)

Question 9

An approach to combining risk identification,risk assessment,and risk appetite into a single strategy.

Accepted Answer

A)  risk management
B)  risk analysis
C)  classification categories
D)  risk identification
E)  field change orderF) threat assessmentG) risk appetiteH) qualitative assessmentI) residual riskJ) ranked vulnerability risk worksheetK) B) and J)
L) A) and E)

Question 10

MAC addresses are considered a reliable identifier for devices with network interfaces,since they are essentially foolproof.

Accepted Answer

A) True 
 B)False  False

Question 11

An evaluation of the dangers to information assets,including adetermination of their potential to endanger the organization.

Accepted Answer

A)  risk management
B)  risk analysis
C)  classification categories
D)  risk identification
E)  field change orderF) threat assessmentG) risk appetiteH) qualitative assessmentI) residual riskJ) ranked vulnerability risk worksheetK) A) and G)
L) C) and G)

Question 12

Why is threat identification so important in the process of risk management?

Accepted Answer

Any organization typically faces a wide variety of threats.If you assume that every threat can and will attack every information asset,then the project scope becomes too complex.To make the process less unwieldy,each step in the threat identification and vulnerability identification processes is managed separately and then coordinated at the end.At every step,the manager is called on to exercise good judgment and draw on experience to make the process function smoothly.

Question 13

Assessing risks includes determining the ____________________ that vulnerable systems will be attacked by specific threats.

Accepted Answer

likelihood...

Question 14

Which of the following distinctly identifies an asset and can be vital in later analysis of threats directed to specific models of certain devices or software components?

Accepted Answer

A)   Name
B)   MAC address
C)   Serial number
D)   Manufacturer's model or part numberE) A) and B)
F) A) and D)

Question 15

What are the included tasks in the identification of risks?

Accepted Answer

Creating an inventory of information ass...

Question 16

An estimate made by the manager using good judgement and experience can account for which factor of risk assessment?

Accepted Answer

A)   Risk determination
B)   Assessing potential loss
C)   Likelihood and consequences
D)   UncertaintyE) A) and B)
F) A) and C) D

Question 17

Discuss the trends in frequency of attacks and how that plays into a risk management strategy.

Accepted Answer

The number of detected attacks is steadi...

Question 18

The information technology management community of interest often takes on the leadership role in addressing risk. ____________

Accepted Answer

A) True 
 B)False

Question 19

Classification categories must be ____________________ and mutually exclusive.

Accepted Answer

The answer of Classification categories must be ____________________ and mutually...

Question 20

Once an information asset is identified,categorized,and classified,what must also be assigned to it?

Accepted Answer

A)   Asset tag
B)   Relative value
C)   Location ID
D)   Threat riskE) A) and D)
F) A) and C)

Exam 6: Risk Management: Identifying and Assessing Risk

Which of the following attributes does NOT apply to software information assets?

Correct Answer
verified

The identification and assessment of levels of risk in an organization describes which of the following?

Correct Answer
verified

The probability that a specific vulnerability within an organization will be the targetof an attack is known as risk.____________

Correct Answer
verified

The recognition,enumeration,and documentation of risks to anorganization's information assets.is known as risk control.____________

Correct Answer
verified

How should the initial inventory be used when classifying and categorizing assets?

Correct Answer
verified
The inventory should reflect the sensiti...
View Answer

Risk ____________ is the process of discovering and assessing the risks to an organization's operations and determining how those risks can be mitigated.

Correct Answer
verified

As part of the risk identification process,listing the assets in order of importance can be achieved by using a weighted ____________________ worksheet.

Correct Answer
verified
factor ana...
View Answer

Two of the activities involved in risk management include identifying risks and assessing risks.Which of the following activities is part of the risk identification process?

Correct Answer
verified

An approach to combining risk identification,risk assessment,and risk appetite into a single strategy.

Correct Answer
verified

MAC addresses are considered a reliable identifier for devices with network interfaces,since they are essentially foolproof.

Correct Answer
verified
False

An evaluation of the dangers to information assets,including adetermination of their potential to endanger the organization.

Correct Answer
verified

Why is threat identification so important in the process of risk management?

Assessing risks includes determining the ____________________ that vulnerable systems will be attacked by specific threats.

Correct Answer
verified
likelihood...
View Answer

Which of the following distinctly identifies an asset and can be vital in later analysis of threats directed to specific models of certain devices or software components?

Correct Answer
verified

What are the included tasks in the identification of risks?

Correct Answer
verified
Creating an inventory of information ass...
View Answer

An estimate made by the manager using good judgement and experience can account for which factor of risk assessment?

Correct Answer
verified
D

Discuss the trends in frequency of attacks and how that plays into a risk management strategy.

Correct Answer
verified
The number of detected attacks is steadi...
View Answer

The information technology management community of interest often takes on the leadership role in addressing risk. ____________

Correct Answer
verified

Classification categories must be ____________________ and mutually exclusive.

Correct Answer
verified

Once an information asset is identified,categorized,and classified,what must also be assigned to it?

Correct Answer
verified

Exam 6: Risk Management: Identifying and Assessing Risk

Which of the following attributes does NOT apply to software information assets?

Correct AnswerverifiedShow Answer

The identification and assessment of levels of risk in an organization describes which of the following?

Correct AnswerverifiedShow Answer

The probability that a specific vulnerability within an organization will be the targetof an attack is known as risk.____________

Correct AnswerverifiedShow Answer

The recognition,enumeration,and documentation of risks to anorganization's information assets.is known as risk control.____________ ​

Correct AnswerverifiedShow Answer

How should the initial inventory be used when classifying and categorizing assets?

Correct AnswerverifiedThe inventory should reflect the sensiti...View AnswerShow Answer

Risk ____________ is the process of discovering and assessing the risks to an organization's operations and determining how those risks can be mitigated.

Correct AnswerverifiedShow Answer

As part of the risk identification process,listing the assets in order of importance can be achieved by using a weighted ____________________ worksheet.

Correct Answerverifiedfactor ana...View AnswerShow Answer

Two of the activities involved in risk management include identifying risks and assessing risks.Which of the following activities is part of the risk identification process?

Correct AnswerverifiedShow Answer

An approach to combining risk identification,risk assessment,and risk appetite into a single strategy.

Correct AnswerverifiedShow Answer

MAC addresses are considered a reliable identifier for devices with network interfaces,since they are essentially foolproof.

Correct AnswerverifiedFalse

An evaluation of the dangers to information assets,including adetermination of their potential to endanger the organization.

Correct AnswerverifiedShow Answer

Why is threat identification so important in the process of risk management?

Assessing risks includes determining the ____________________ that vulnerable systems will be attacked by specific threats.

Correct Answerverifiedlikelihood...View AnswerShow Answer

Which of the following distinctly identifies an asset and can be vital in later analysis of threats directed to specific models of certain devices or software components?

Correct AnswerverifiedShow Answer

What are the included tasks in the identification of risks?

Correct AnswerverifiedCreating an inventory of information ass...View AnswerShow Answer

An estimate made by the manager using good judgement and experience can account for which factor of risk assessment?

Correct AnswerverifiedD

Discuss the trends in frequency of attacks and how that plays into a risk management strategy.

Correct AnswerverifiedThe number of detected attacks is steadi...View AnswerShow Answer

The information technology management community of interest often takes on the leadership role in addressing risk. ____________

Correct AnswerverifiedShow Answer

Classification categories must be ____________________ and mutually exclusive.

Correct AnswerverifiedShow Answer

Once an information asset is identified,categorized,and classified,what must also be assigned to it?

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

The recognition,enumeration,and documentation of risks to anorganization's information assets.is known as risk control.____________

Correct Answer
verified

Correct Answer
verified
The inventory should reflect the sensiti...
View Answer

Correct Answer
verified

Correct Answer
verified
factor ana...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified
False

Correct Answer
verified

Correct Answer
verified
likelihood...
View Answer

Correct Answer
verified

Correct Answer
verified
Creating an inventory of information ass...
View Answer

Correct Answer
verified
D

Correct Answer
verified
The number of detected attacks is steadi...
View Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified