ISC2 - CC - Chapter 1 - Module 2

What is impact in risk management?

• The probability of a risk occurring
• The potential consequences or severity of a risk
• The level of effort required for risk mitigation
• The financial value associated with a risk event

The magnitude of the harm expected as result of the consequences of unauthorized disclosure, modification, destruction, or loss of information, is known as?

• Likelihood
• Threat
• Impact
• Vulnerability

What is likelihood in risk management?

• The potential consequences or severity of a risk
• The probability of a risk occurring
• The level of effort required for risk mitigation
• The financial value associated with a risk event

What is risk appetite in risk management?

• The willingness to take risks
• The complete avoidance of all risks
• The process of transferring risks to external parties
• The acceptance of all risks without any action

Which of the following are the main categories of risk?

• Cyber attack risks and environmental risks
• Cyber attack risks and threat risks
• Vulnerability risks and environmental risks
• Cyber attack risks and automatic risks

Why is risk management important in organizations?

• It eliminates all risks completely
• It ensures the confidentiality of sensitive information
• It helps organizations make informed decisions to mitigate potential risks
• It transfers all risks to external parties

Which of the followings is usually used to represent risk?

• Threat actors and vulnerabilities
• Assets, vulnerabilities, and threats
• Likelihood and impact
• Probability and cause

Risk can only exist when?

• Treat actors, assets and vulnerabilities are present
• Threat actors are able to identify targets
• Threats, assets and vulnerabilities are present
• Treat actors are able to find treat vectors

What are assets in the context of risk management?

• The consequences or impacts of a risk event
• The potential threats that could exploit vulnerabilities
• The resources, information, or systems that have value to an organization
• The likelihood of a risk occurring

In risk management concepts, a(n) _________ is something a security practitioner might need to protect?

• Vulnerability
• Asset
• Threat
• Likelihood