Security Policies and Risk

Which of the following is not a common type of security policy?

• Access control policy

• Password policy

• Risk management policy

• Network topology policy

What is the main purpose of a risk assessment?

• To identify and prioritize potential security risks

• To implement security controls and policies

• To train employees on security best practices

• To monitor and respond to security incidents

Which of the following is NOT an example of a security risk?

• Unauthorized access to sensitive data

• Physical theft of company assets

• Software bugs and glitches

• Regular system backups

Which of the following is NOT a common type of security control?

• Firewall

• Intrusion detection system

• Data backup system

• Employee performance review system

Which of the following is a common method for mitigating security risks?

• Ignoring the risks and hoping for the best

• Removing all potential vulnerabilities from a system

• Accepting the risks and doing nothing to address them

• Implementing security controls and policies