uCertify 34-35

Which of the following usually entails not carrying out a proposed plan because the risk factor is too great?

• Risk mitigation

• Risk assessment

• Risk transference

• Risk avoidance

Which process is required by GDPR to identify the risk of data compromise to an individual?

• data control

• impact assessment

• terms of agreement

• all of these

Which type of disaster can be defined as being caused by the influence of individuals?

• person-made

• environmental

• weather-made

• none of these

Which of the following is the attempt to determine the number of threats or hazards that could possibly occur in a given amount of time to your computers and networks?

• Risk avoidance

• Risk assessment

• Risk mitigation

• Risk acceptance

____ defines the average number of failures per million hours of operation for a product in question?

• MTBF

• None of these

• MTBR

• MTTR

Which of the following is an example of risk transference?

• All of these

• Risk appetite

• Risk avoidance

• Cybersecurity insurance

Your organization has just hired a new employee. However, the employee is really a spy looking to steal your intellectual property. Which type of risk would this be considered?

• Multiparty

• All of these

• External

• Internal

What information can be used to distinguish or trace an individual's identity?

• PHI

• None of these

• HIPAA

• PII

During which phase of the information lifecycle is data obtained?

• Storage

• Disposal

• Collection

• Usage

Which term is used to describe the crown jewels of an organization?

• None of these

• Sensitive data

• Important data