Question 1

The calculation of the likelihood of an attack coupled with the attack frequency to determine the expected number of losses within a specified time range is called the __________.

Accepted Answer

A)   loss frequency
B)   annualized loss expectancy 
C)   likelihood
D)   benefit of loss

Question 2

____________________ measures are generally less focused on numbers and are more strategic than metrics-based measures.

Accepted Answer

The answer of ____________________ measures are generally less focused on...

Question 3

According to Sun Tzu, if you know yourself and know your enemy, you have an average chance to be successful in an engagement.

Accepted Answer

A) True 
 B)False

Question 4

Risk _________ defines the quantity and nature of risk that organizations are willing to accept as they evaluate the trade-offs between perfect security and unlimited accessibility.

Accepted Answer

A)   benefit
B)   appetite 
C)   acceptance
D)   avoidance

Question 5

Federal agencies such as the NSA, FBI, and CIA use specialty classification schemes.For materials that are not considered "National Security Information," __________ data is the lowest-level classification.

Accepted Answer

A)   sensitive
B)   confidential 
C)   unclassified
D)   public

Question 6

The __________ control strategy attempts to shift risk to other assets, other processes, or other organizations.

Accepted Answer

A)   transference
B)   defense 
C)   acceptance
D)   mitigation

Question 7

The first phase of risk management is _________.

Accepted Answer

A)   risk identification
B)   design 
C)   risk control
D)   risk evaluation

Question 8

Each of the threats faced by an organization must be evaluated, including determining the threat's potential to endanger the organization, which is known as a threat prioritization. _________________________

Accepted Answer

A) True 
 B)False

Exam 5: Risk Management

According to Sun Tzu, if you know yourself and know your enemy, you have an average chance to be successful in an engagement.

Correct Answer
verified

The __________ control strategy attempts to shift risk to other assets, other processes, or other organizations.

Correct Answer
verified

Risk _________ defines the quantity and nature of risk that organizations are willing to accept as they evaluate the trade-offs between perfect security and unlimited accessibility.

Correct Answer
verified

The first phase of risk management is _________.

Correct Answer
verified

Federal agencies such as the NSA, FBI, and CIA use specialty classification schemes.For materials that are not considered "National Security Information," __________ data is the lowest-level classification.

Correct Answer
verified

The calculation of the likelihood of an attack coupled with the attack frequency to determine the expected number of losses within a specified time range is called the __________.

Correct Answer
verified

Each of the threats faced by an organization must be evaluated, including determining the threat's potential to endanger the organization, which is known as a threat prioritization. _________________________

Correct Answer
verified

____________________ measures are generally less focused on numbers and are more strategic than metrics-based measures.

Correct Answer
verified

Exam 5: Risk Management

According to Sun Tzu, if you know yourself and know your enemy, you have an average chance to be successful in an engagement.

Correct AnswerverifiedShow Answer

The __________ control strategy attempts to shift risk to other assets, other processes, or other organizations.

Correct AnswerverifiedShow Answer

Risk _________ defines the quantity and nature of risk that organizations are willing to accept as they evaluate the trade-offs between perfect security and unlimited accessibility.

Correct AnswerverifiedShow Answer

The first phase of risk management is _________.

Correct AnswerverifiedShow Answer

Federal agencies such as the NSA, FBI, and CIA use specialty classification schemes.For materials that are not considered "National Security Information," __________ data is the lowest-level classification.

Correct AnswerverifiedShow Answer

The calculation of the likelihood of an attack coupled with the attack frequency to determine the expected number of losses within a specified time range is called the __________.

Correct AnswerverifiedShow Answer

Each of the threats faced by an organization must be evaluated, including determining the threat's potential to endanger the organization, which is known as a threat prioritization. _________________________

Correct AnswerverifiedShow Answer

____________________ measures are generally less focused on numbers and are more strategic than metrics-based measures.

Correct AnswerverifiedShow Answer

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified

Correct Answer
verified