Deck 3: Assessing Risk and Impact

Question 1

What is the primary goal of a risk assessment?

A)Recovering from a disaster
B)Mitigating loss of productivity
C)Developing a disaster recovery plan
D)Developing a business continuity plan

Answer 1

B

Question 2

In today's world,the possibility of attack by outside agencies has ___________ dramatically.

A)been exaggerated
B)been downplayed
C)decreased
D)increased

Answer 2

D

Question 3

Each business process contributes to the operation of the enterprise,but there are some without which the enterprise cannot carry out the others.What are these called?

A)Disaster recovery processes
B)Mission-critical processes
C)Risk management processes
D)Risk assessment processes

Answer 3

B

Question 4

It is important to __________ for preventive measures and the recovery from any disaster situation.

A)set priorities
B)allow
C)compete
D)look

Question 5

The assessment of various levels of risks cannot be compared to each other unless the methods used to assess them are _________.

A)the same
B)diverse
C)simplified
D)detailed

Question 6

A(n)__________ is the chance that someone or something could be harmed by a hazard..

A)recovery plan
B)assessment
C)risk
D)disaster

Question 7

Why must a disaster plan be continually revisited and updated?

A)Threats change
B)Assets change
C)Processes and abilities within the organization change
D)All of the above

Question 8

How is asset-based risk assessment different from disaster-based risk assessment?

A)You assess all assets,rather than hazards.
B)You assess all hazards,rather than assets.
C)You assess all risks,rather than assets.
D)You assess all assets,rather than risks.

Question 9

One of the first considerations in the business impact analysis is the __________.

A)assets that are vulnerable
B)service-level agreements that the organization must meet
C)risks
D)hazards

Question 10

Which assets must be considered when using asset-based risk assessment?

A)all intangible assets
B)all tangible assets
C)all assets
D)those assets valued at more than a determined threshold

Question 11

Why must backups be tested?

A)Without knowing that they can be recovered,backups are useless
B)To determine the cost if they are needed during a disaster recovery
C)To determine if they are needed
D)All of the above

Question 12

In the disaster recovery plan,each response should detail the use of resources and assign only those resources needed to _________ the problem.

A)assess
B)quantify
C)delegate
D)fix

Question 13

Each __________ needs a plan and a measured response spelled out in the disaster recovery plan.

A)assessment
B)recovery
C)threat
D)plan

Question 14

The best disaster is the one you don't have to __________.

A)plan for
B)avoid
C)recover from
D)assess

Question 15

The possibility of harm or loss from any given disaster is different depending on the __________.

A)organization
B)situation
C)severity of the disaster
D)All of the above

Question 16

Realistic ramifications and weights should be assigned to all events and potential ______________.

Question 17

A(n)__________ is anything that can cause harm.

Question 18

Which of the following is among the most difficult to recover?

A)Microfilm
B)Paper
C)Computer disks
D)Hard drives

Question 19

OCTAVE,a highly flexible assessment strategy,can be tailored to nearly any organization and can be very effective in identifying __________.

A)costs associated with disaster recovery
B)areas where the organization is most likely to be affected by a disaster recovery
C)areas where the organization is most likely to be affected by a disaster situation
D)areas where the organization is most likely to be affected by backup procedures

Question 20

__________ is a risk-based strategic assessment and planning technique used primarily for security but which also can be used for disaster recovery planning purposes.

A)OCTAVE
B)Business Impact Analysis
C)Asset-based Risk Assessment
D)Disaster-based Risk Assessment

Question 21

Functions need to be assessed by problems that their __________ will cause to the everyday operations of the business.

Question 22

In __________ process,rather than identifying the assets and disasters and then driving the process from those perspectives,you address the whole organization from the perspective of the perceived threats.

Question 23

For each asset that the company identifies,it needs to identify all the __________ that could impact each of the assets.

Question 24

All disasters and emergencies have a(n)________________ impact.

Question 25

A(n)__________ method of risk assessment needs to be applied across the business enterprise.

Question 27

Match the following terms with their definitions:

-Business impact

A)magnitude of the potential loss
B)result of judging the worth or value of something or someone
C)the possibility of suffering harm or loss because of an event

Question 28

Match the following terms with their definitions:

-Assessment

A)magnitude of the potential loss
B)result of judging the worth or value of something or someone
C)the possibility of suffering harm or loss because of an event

Question 29

Match the following terms with there definitions:

-Disaster-based risk assessment

A)key to the ability to recover from disasters
B)based on awareness of existing risk factors
C)all possible hazards, rated
D)shows where the organization is in its disaster recovery process

Question 30

Match the following terms with there definitions:

-Tracking document

A)key to the ability to recover from disasters
B)based on awareness of existing risk factors
C)all possible hazards, rated
D)shows where the organization is in its disaster recovery process

Question 31

Match the following terms with there definitions:

-Accurately identified hazards

A)key to the ability to recover from disasters
B)based on awareness of existing risk factors
C)all possible hazards, rated
D)shows where the organization is in its disaster recovery process

Question 32

Match the following terms with there definitions:

-Weighted hazard list

A)key to the ability to recover from disasters
B)based on awareness of existing risk factors
C)all possible hazards, rated
D)shows where the organization is in its disaster recovery process

Question 33

Match each of the disaster-based risk assessment steps with its order of completion:

-First

A)assess hazards
B)implement controls
C)test and evaluate
D)identify hazards
E)develop controls and make risk decisions

Question 34

Match each of the disaster-based risk assessment steps with its order of completion:

-Second

A)assess hazards
B)implement controls
C)test and evaluate
D)identify hazards
E)develop controls and make risk decisions

Question 35

Match each of the disaster-based risk assessment steps with its order of completion:

-Third

A)assess hazards
B)implement controls
C)test and evaluate
D)identify hazards
E)develop controls and make risk decisions

Question 36

Match each of the disaster-based risk assessment steps with its order of completion:

-Fourth

A)assess hazards
B)implement controls
C)test and evaluate
D)identify hazards
E)develop controls and make risk decisions

Question 37

Match each of the disaster-based risk assessment steps with its order of completion:

-Fifth

A)assess hazards
B)implement controls
C)test and evaluate
D)identify hazards
E)develop controls and make risk decisions

Question 38

Match the following terms to their descriptions:

-Service Level Agreement

A)role that each area in the organization plays
B)addresses the organization from the perspective of perceived threats
C)the level of harm that may occur from any given threat or risk
D)a contract that spells out the terms of service that will be provided

Question 39

Match the following terms to their descriptions:

-Functional Area Input

A)role that each area in the organization plays
B)addresses the organization from the perspective of perceived threats
C)the level of harm that may occur from any given threat or risk
D)a contract that spells out the terms of service that will be provided

Question 40

Match the following terms to their descriptions:

-Business Impact Analysis

A)role that each area in the organization plays
B)addresses the organization from the perspective of perceived threats
C)the level of harm that may occur from any given threat or risk
D)a contract that spells out the terms of service that will be provided

Question 41

Match the following terms to their descriptions:

-Business Impact

A)role that each area in the organization plays
B)addresses the organization from the perspective of perceived threats
C)the level of harm that may occur from any given threat or risk
D)a contract that spells out the terms of service that will be provided

Question 42

Match the following OCTAVE phases with their respective phase number:

-Phase 1

A)Identify Infrastructure Vulnerabilities
B)Develop a Security Strategy
C)Create a Threat Profile

Question 43

Match the following OCTAVE phases with their respective phase number:

-Phase 2

A)Identify Infrastructure Vulnerabilities
B)Develop a Security Strategy
C)Create a Threat Profile

Question 44

Match the following OCTAVE phases with their respective phase number:

-Phase 3

A)Identify Infrastructure Vulnerabilities
B)Develop a Security Strategy
C)Create a Threat Profile