Chapter 15 Risk Quiz

A threat results from ______________.

• lack of trained security staff

• weak physical security

• a vulnerability exploited from a threat agent

• single factor authentication

Why is it important to manage assets?

• To know if any assets are missing or were stolen

• To identify the vulnerabilities in the asset

• To identify who is using an asset

• All of the above

Which of the following best describes a low priority impact?

• An electrical issue forced the shutdown of all redundant servers and equipment.

• Someone hacked the Twitter account and tweeted nonsense tweets from the account.

• A repeat customer cannot access his or her customer account.

• A water pipe breaks, impacting computers and printers in the marketing department.

Which best represents an intangible IT asset?

• ID cards

• laptops

• Server room

• Company's reputation

Continually scanning for malware is an example of risk ____________.

• transfer

• mitigation

• elimination

• management

Identifying the risks in a situation is called ______________.

• risk awareness

• risk monitoring

• risk assessment

• risk framing

If an IT staffer is determining potential losses with actual financial data, he/she is ______________________.

• performing risk with monetary verification

• conducting an overall risk assessment

• using a quantitative risk assessment method

• using a qualitative method of risk analysis

Which is NOT a step in the NIST 800-39 risk-management framework document?

• identify the risk

• frame the risk

• monitor the risk

• assess the risk