CYS 310 | Chapter 1 Assessment

Which one of the following properly defines total risk?

• = Threat - Mitigation

• = Vulnerability - Controls

• = Threat x Vulnerability x Asset Value

• = Vulnerability x Controls

Which one of the following properly defines risk?

• = Threat x Mitigation

• = Vulnerability x Controls

• = Controls x Residual Risk

• = Threat x Vulnerability

The best bet is to reduce risk to a level that can be accepted

• True

• False

Which of the following are accurate pairings of threat categories? (Select two)

• External and Internal

• Natural and Supernatural

• Intentional and Accidental

• Computer and User

A loss of client confidence or public trust is an example of a loss of _

A _ is used to reduce a vulnerability.

As long as a company is profitable, it does not need to consider survivability

• True

• False

What is the primary goal of an information security program?

• To eliminate losses related to employee actions

• To eliminate losses related to risk

• To reduce losses related to residual risk

• To reduce losses related to confidentiality, integrity, and availability

The _ is an industry-recognized standard list of common vulnerabilities.

Which of the following is a goal of risk management?

• To identify the correct cost balance between risk and controls

• To eliminate risk by implementing controls

• To eliminate the loss associated with risk

• To calculate value associated with residual risk