Question 1

The ____ is an attribute that can be helpful in analyzing threat outbreaks when certain manufacturers announce specific vulnerabilities.

Accepted Answer

A)  serial number 
B)  model number 
C)  manufacturer name 
D)  software version 
A)  serial number 
B)  model number 
C)  manufacturer name 
D)  software version C

Question 2

Almost every organization is aware of its image in the local,national,and international spheres.Loss or ____ of some assets would prove especially embarrassing.

Accepted Answer

A)  theft 
B)  deletion 
C)  exposure 
D)  destruction 
A)  theft 
B)  deletion 
C)  exposure 
D)  destruction C

Question 3

The ____ is an effective attribute for tracking network devices and servers,but rarely applies to software.

Accepted Answer

A)  name 
B)  asset type 
C)  MAC address 
D)  IP address 
A)  name 
B)  asset type 
C)  MAC address 
D)  IP address D

Question 4

Assessing risks includes assigning a value to each information asset.

Accepted Answer

A) True 
 B)False

Question 5

The inventory should also reflect the ____________________ and security priority assigned to each information asset.

Accepted Answer

The answer of The inventory should also reflect the ____________________...

Question 6

The ultimate goal of risk identification is to assess the circumstances and setting of each information asset to reveal any threats._________________________

Accepted Answer

A) True 
 B)False

Question 7

The ____ is also referred to as an electronic serial number.

Accepted Answer

A)  asset ID 
B)  MAC address 
C)  IP address 
D)  model number 
A)  asset ID 
B)  MAC address 
C)  IP address 
D)  model number

Question 8

____________________ is the overall rating-a numerical value on a defined scale-of the probability that a specific vulnerability will be exploited.

Accepted Answer

The answer of ____________________ is the overall rating-a numerical value...

Question 9

Risk management is the process of discovering and assessing the risks to an organization's operations and determining how those risks can be ____________________.

Accepted Answer

controlled

Question 10

The final step in the risk identification process is to list the assets in order of importance.This goal can be achieved by using a(n)____ worksheet.

Accepted Answer

A)  asset valuation 
B)  weighted factor analysis 
C)  asset classification 
D)  TVA 
A)  asset valuation 
B)  weighted factor analysis 
C)  asset classification 
D)  TVA

Question 11

The process of assigning relative values to information assets helps to ensure that assets with higher values are protected first.

Accepted Answer

A) True 
 B)False

Question 12

Risk is the likelihood of the occurrence of a vulnerability multiplied by the value of the information asset minus the percentage of risk mitigated by current controls plus the uncertainty of current knowledge of the vulnerability._________________________

Accepted Answer

A) True 
 B)False

Question 13

Weighting criteria can be used to assess the value of information assets or impact evaluation._________________________

Accepted Answer

A) True 
 B)False

Question 14

A(n)____________________ number uniquely identifies a specific device.

Accepted Answer

The answer of A(n)____________________ number uniquely identifies a specific device....

Question 15

Which of the following is the final step in the risk identification process of information assets?

Accepted Answer

A)  Assessing relative value 
B)  Listing by order of importance 
C)  Preparing deliverables 
D)  Identifying and categorizing 
A)  Assessing relative value 
B)  Listing by order of importance 
C)  Preparing deliverables 
D)  Identifying and categorizing

Question 16

The information technology community often takes on the leadership role in addressing risk.

Accepted Answer

A) True 
 B)False

Question 17

Each component of an IT system has information of value during the risk identification process.These components include people,policies,data,software,hardware and networking.

Accepted Answer

A) True 
 B)False

Question 18

The simple classification scheme for an information asset of confidential,____ and public,designates the level of protection needed for a particular information asset.

Accepted Answer

A)  restricted 
B)  private 
C)  exclusive 
D)  internal 
A)  restricted 
B)  private 
C)  exclusive 
D)  internal

Question 19

The last stage in the risk identification process is to document the organization's ____________________.

Accepted Answer

The answer of The last stage in the risk identification...

Question 20

The data classification scheme for an information asset could include confidential,internal,and private.Each of these classification categories designates the level of protection needed for a particular information asset._________________________

Accepted Answer

A) True 
 B)False

The ____ is an attribute that can be helpful in analyzing threat outbreaks when certain manufacturers announce specific vulnerabilities.

Almost every organization is aware of its image in the local,national,and international spheres.Loss or ____ of some assets would prove especially embarrassing.

The ____ is an effective attribute for tracking network devices and servers,but rarely applies to software.

Assessing risks includes assigning a value to each information asset.

The inventory should also reflect the ____________________ and security priority assigned to each information asset.

The ultimate goal of risk identification is to assess the circumstances and setting of each information asset to reveal any threats._________________________

The ____ is also referred to as an electronic serial number.

____________________ is the overall rating-a numerical value on a defined scale-of the probability that a specific vulnerability will be exploited.

Risk management is the process of discovering and assessing the risks to an organization's operations and determining how those risks can be ____________________.

The final step in the risk identification process is to list the assets in order of importance.This goal can be achieved by using a(n)____ worksheet.

The process of assigning relative values to information assets helps to ensure that assets with higher values are protected first.

Risk is the likelihood of the occurrence of a vulnerability multiplied by the value of the information asset minus the percentage of risk mitigated by current controls plus the uncertainty of current knowledge of the vulnerability._________________________

Weighting criteria can be used to assess the value of information assets or impact evaluation._________________________

A(n)____________________ number uniquely identifies a specific device.

Which of the following is the final step in the risk identification process of information assets?

The information technology community often takes on the leadership role in addressing risk.

Each component of an IT system has information of value during the risk identification process.These components include people,policies,data,software,hardware and networking.

The simple classification scheme for an information asset of confidential,____ and public,designates the level of protection needed for a particular information asset.

The last stage in the risk identification process is to document the organization's ____________________.

The data classification scheme for an information asset could include confidential,internal,and private.Each of these classification categories designates the level of protection needed for a particular information asset._________________________

Introduction to the Management of Information Security

Planning for Security

Planning for Contingencies

Information Security Policy

Developing the Security Program

Security Management Models

Security Management Practices

Risk Management: Controlling Risk

Protection Mechanisms

Personnel and Security

Law and Ethics

Filters

Exam 8: Risk Management: Identifying and Assessing Risk

The ____ is an attribute that can be helpful in analyzing threat outbreaks when certain manufacturers announce specific vulnerabilities.

Almost every organization is aware of its image in the local,national,and international spheres.Loss or ____ of some assets would prove especially embarrassing.

The ____ is an effective attribute for tracking network devices and servers,but rarely applies to software.

Assessing risks includes assigning a value to each information asset.

The inventory should also reflect the ____________________ and security priority assigned to each information asset.

The ultimate goal of risk identification is to assess the circumstances and setting of each information asset to reveal any threats._________________________

The ____ is also referred to as an electronic serial number.

____________________ is the overall rating-a numerical value on a defined scale-of the probability that a specific vulnerability will be exploited.

Risk management is the process of discovering and assessing the risks to an organization's operations and determining how those risks can be ____________________.

The final step in the risk identification process is to list the assets in order of importance.This goal can be achieved by using a(n)____ worksheet.

The process of assigning relative values to information assets helps to ensure that assets with higher values are protected first.

Risk is the likelihood of the occurrence of a vulnerability multiplied by the value of the information asset minus the percentage of risk mitigated by current controls plus the uncertainty of current knowledge of the vulnerability._________________________

Weighting criteria can be used to assess the value of information assets or impact evaluation._________________________

A(n)____________________ number uniquely identifies a specific device.

Which of the following is the final step in the risk identification process of information assets?

The information technology community often takes on the leadership role in addressing risk.

Each component of an IT system has information of value during the risk identification process.These components include people,policies,data,software,hardware and networking.

The simple classification scheme for an information asset of confidential,____ and public,designates the level of protection needed for a particular information asset.

The last stage in the risk identification process is to document the organization's ____________________.

The data classification scheme for an information asset could include confidential,internal,and private.Each of these classification categories designates the level of protection needed for a particular information asset._________________________

Introduction to the Management of Information Security

Planning for Security

Planning for Contingencies

Information Security Policy

Developing the Security Program

Security Management Models

Security Management Practices

Risk Management: Controlling Risk

Protection Mechanisms

Personnel and Security

Law and Ethics

Filters