Risk Management Part 1

What is the definition of risk in cybersecurity?

• The likelihood of a cyber-attack occurring

• The potential for harm resulting from a cyber threat

• The cost of implementing security measures

• The size of an organization's IT infrastructure

Which of the following is NOT a component of risk?

• Threat

• Vulnerability

• Countermeasure

• Impact

What does the CIA triad stand for in cybersecurity risk management?

• Confidentiality, Integrity, Availability

• Cybersecurity, Integrity, Authorization

• Confidentiality, Integrity, Authorization

• Cybersecurity, Integrity, Availability

Which of the following is an example of a technical control?

• Security policies

• Security awareness training

• Firewalls

• Background checks

What is the difference between a threat and a vulnerability?

• They are the same thing

• A threat is a weakness in a system, while a vulnerability is any potential danger

• A vulnerability is a weakness in a system, while a threat is any potential danger

• A threat is the likelihood of a risk occurring, while a vulnerability is the impact

Which of the following is an example of a physical control?

• Encryption

• Biometric authentication

• Security guards

• Intrusion detection system

What does the term "asset" refer to in cybersecurity risk management?

• A potential risk

• Anything of value to an organization

• A risk response strategy

• A type of threat actor

What is the formula commonly used to calculate risk?

• Threat x Vulnerability

• Asset x Vulnerability

• Threat x Asset

• Threat x Vulnerability x Asset

What is the primary goal of risk management in cybersecurity?

• To eliminate all threats

• To minimize the impact of cyber attacks

• To achieve 100% security

• To transfer all risks to a third party

Which of the following is NOT a type of risk in cybersecurity?

• Insider threat

• Natural disaster

• Zero-day exploit

• Security patch