Question 1

According to Sun Tzu - knowing yourself and your enemy "for every victory gained,you will suffer a defeat".

Accepted Answer

A) True 
 B)False

Question 2

Determining the likelihood that vulnerable systems will be attacked by specific threats is part of the risk identification process._________________________

Accepted Answer

A) True 
 B)False

Question 3

____________________ are specific areas in which threat agents can attack an information asset.

Accepted Answer

The answer of ____________________ are specific areas in which threat...

Question 4

Risk Analysis is the process of discovering and assessing the risks to an organization's operations and determining how those risks can be controlled or mitigated.

Accepted Answer

A) True 
 B)False

Question 5

Organizations should have a data classification scheme categorizing information assets based on their sensitivity and security needs; for example: confidential,internal and public.

Accepted Answer

A) True 
 B)False

Question 6

The final step in the risk identification process is to list the assets in order of cost,using a weighted factor analysis worksheet._________________________

Accepted Answer

A) True 
 B)False

Question 7

What information signifies that a manufacturer performed an upgrade to a hardware component at their customer's premises?

Accepted Answer

A)  Software version 
B)  Update revision 
C)  Field change order number 
D)  Serial number 
A)  Software version 
B)  Update revision 
C)  Field change order number 
D)  Serial number

Question 8

The ____ community best understands threats and attacks that put an organization at risk.

Accepted Answer

A)  information technology 
B)  information security 
C)  general management 
D)  users 
A)  information technology 
B)  information security 
C)  general management 
D)  users

Question 9

Assigning a value to each information asset is part of the identification process._________________________

Accepted Answer

A) True 
 B)False

Question 10

As part of the risk identification process,listing the assets in order of importance can be achieved by using a weighted ____________________ worksheet.

Accepted Answer

The answer of As part of the risk identification process,listing...

Question 11

Assessing risks includes determining the ____________________ that vulnerable systems will be attacked by specific threats.

Accepted Answer

likelihood

Question 12

As each information asset is identified,categorized,and ____,a relative value must also be assigned to it.

Accepted Answer

A)  prioritized 
B)  classified 
C)  labeled 
D)  cataloged 
A)  prioritized 
B)  classified 
C)  labeled 
D)  cataloged

Question 13

Piracy and copyright infringement are examples of the threat of compromise to ____________________ property.

Accepted Answer

The answer of Piracy and copyright infringement are examples of...

Question 14

Risk is the likelihood of the occurrence of a(n)____ multiplied by the value of the information asset minus the percentage of risk mitigated by current controls plus the uncertainty of current knowledge of the vulnerability.

Accepted Answer

A)  attack 
B)  vulnerability 
C)  exploit 
D)  assessment 
A)  attack 
B)  vulnerability 
C)  exploit 
D)  assessment

Question 15

As each information asset is identified,____________________,and classified,a relative value must also be assigned to it.

Accepted Answer

The answer of As each information asset is identified,____________________,and classified,a...

Question 16

After a peak in 2000,the number of organizations reporting unauthorized use of computer systems has been declining steadily; the amount reporting no unauthorized access has been increasing._________________________

Accepted Answer

A) True 
 B)False

Question 17

Briefly describe any three standard IT system components and their respective risk management components.

Accepted Answer

- People are divided into insiders (empl

Question 18

Which of the following activities is part of the risk assessment process?

Accepted Answer

A)  Creating an inventory of information assets 
B)  Classifying and organizing information assets into meaningful groups 
C)  Assigning a value to each information asset 
D)  Calculating the risks to which assets are exposed in their current setting 
A)  Creating an inventory of information assets 
B)  Classifying and organizing information assets into meaningful groups 
C)  Assigning a value to each information asset 
D)  Calculating the risks to which assets are exposed in their current setting

Question 19

Likelihood is the overall rating of the probability that a specific vulnerability will be exploited.

Accepted Answer

A) True 
 B)False

Question 20

Which of the following describes an attribute that displays where an asset can be found on an organization's network?

Accepted Answer

A)  Serial number 
B)  Logical location 
C)  Controlling entity 
D)  Physical location 
A)  Serial number 
B)  Logical location 
C)  Controlling entity 
D)  Physical location

According to Sun Tzu - knowing yourself and your enemy "for every victory gained,you will suffer a defeat".

Determining the likelihood that vulnerable systems will be attacked by specific threats is part of the risk identification process._________________________

____________________ are specific areas in which threat agents can attack an information asset.

Risk Analysis is the process of discovering and assessing the risks to an organization's operations and determining how those risks can be controlled or mitigated.

Organizations should have a data classification scheme categorizing information assets based on their sensitivity and security needs; for example: confidential,internal and public.

The final step in the risk identification process is to list the assets in order of cost,using a weighted factor analysis worksheet._________________________

What information signifies that a manufacturer performed an upgrade to a hardware component at their customer's premises?

The ____ community best understands threats and attacks that put an organization at risk.

Assigning a value to each information asset is part of the identification process._________________________

As part of the risk identification process,listing the assets in order of importance can be achieved by using a weighted ____________________ worksheet.

Assessing risks includes determining the ____________________ that vulnerable systems will be attacked by specific threats.

As each information asset is identified,categorized,and ____,a relative value must also be assigned to it.

Piracy and copyright infringement are examples of the threat of compromise to ____________________ property.

Risk is the likelihood of the occurrence of a(n)____ multiplied by the value of the information asset minus the percentage of risk mitigated by current controls plus the uncertainty of current knowledge of the vulnerability.

As each information asset is identified,____________________,and classified,a relative value must also be assigned to it.

After a peak in 2000,the number of organizations reporting unauthorized use of computer systems has been declining steadily; the amount reporting no unauthorized access has been increasing._________________________

Briefly describe any three standard IT system components and their respective risk management components.

Which of the following activities is part of the risk assessment process?

Likelihood is the overall rating of the probability that a specific vulnerability will be exploited.

Which of the following describes an attribute that displays where an asset can be found on an organization's network?

Introduction to the Management of Information Security

Planning for Security

Planning for Contingencies

Information Security Policy

Developing the Security Program

Security Management Models

Security Management Practices

Risk Management: Controlling Risk

Protection Mechanisms

Personnel and Security

Law and Ethics

Filters

Exam 8: Risk Management: Identifying and Assessing Risk

According to Sun Tzu - knowing yourself and your enemy "for every victory gained,you will suffer a defeat".

Determining the likelihood that vulnerable systems will be attacked by specific threats is part of the risk identification process._________________________

____________________ are specific areas in which threat agents can attack an information asset.

Risk Analysis is the process of discovering and assessing the risks to an organization's operations and determining how those risks can be controlled or mitigated.

Organizations should have a data classification scheme categorizing information assets based on their sensitivity and security needs; for example: confidential,internal and public.

The final step in the risk identification process is to list the assets in order of cost,using a weighted factor analysis worksheet._________________________

What information signifies that a manufacturer performed an upgrade to a hardware component at their customer's premises?

The ____ community best understands threats and attacks that put an organization at risk.

Assigning a value to each information asset is part of the identification process._________________________

As part of the risk identification process,listing the assets in order of importance can be achieved by using a weighted ____________________ worksheet.

Assessing risks includes determining the ____________________ that vulnerable systems will be attacked by specific threats.

As each information asset is identified,categorized,and ____,a relative value must also be assigned to it.

Piracy and copyright infringement are examples of the threat of compromise to ____________________ property.

Risk is the likelihood of the occurrence of a(n)____ multiplied by the value of the information asset minus the percentage of risk mitigated by current controls plus the uncertainty of current knowledge of the vulnerability.

As each information asset is identified,____________________,and classified,a relative value must also be assigned to it.

After a peak in 2000,the number of organizations reporting unauthorized use of computer systems has been declining steadily; the amount reporting no unauthorized access has been increasing._________________________

Briefly describe any three standard IT system components and their respective risk management components.

Which of the following activities is part of the risk assessment process?

Likelihood is the overall rating of the probability that a specific vulnerability will be exploited.

Which of the following describes an attribute that displays where an asset can be found on an organization's network?

Introduction to the Management of Information Security

Planning for Security

Planning for Contingencies

Information Security Policy

Developing the Security Program

Security Management Models

Security Management Practices

Risk Management: Controlling Risk

Protection Mechanisms

Personnel and Security

Law and Ethics

Filters