Hazards, Threats, and Vulnerabilities

Backdoors in a system typically allow:

• Improved system performance

• Unauthorized access

• Faster network speeds

• Enhanced encryption

Answer explanation

Backdoors in a system typically allow unauthorized access, not improved system performance, faster network speeds, or enhanced encryption.

The Shellshock bug is an example of:

• Backdoor

• Obsolete software

• Software flaw

• Unpatched system

Answer explanation

The Shellshock bug is an example of a software flaw, as it is a vulnerability in the Bash shell that allows attackers to execute arbitrary commands.

Risk acceptance involves:

• Eliminating risk activities

• Accepting risk if mitigation costs exceed impact

• Avoiding all risks

• Mitigating every possible risk

Answer explanation

Risk acceptance involves accepting risk if mitigation costs exceed impact.

What kind of damage can a flood cause to data centres?

• Increased data transfer speed

• Data loss and service outages

• Improved data security

• Enhanced network connectivity

Answer explanation

A flood can cause data loss and service outages in data centres, impacting the availability and integrity of stored information.

Risk assessment evaluates identified risks to understand their:

• Visual appeal

• Market potential

• Impact and likelihood

• Marketing benefits

Answer explanation

Risk assessment evaluates identified risks to understand their impact and likelihood.

Hacktivists primarily engage in hacking to:

• Steal financial data

• Promote political agendas or social change

• Sabotage infrastructure

• Extort money

Answer explanation

Hacktivists primarily engage in hacking to promote political agendas or social change.

Classifying risks based on severity and impact is part of:

• Reporting

• Classification

• Governance

• Assurance

Answer explanation

Classifying risks based on severity and impact is part of Classification, as it involves categorizing risks according to their level of importance and potential consequences.

A benefit of intrinsic assurance through software design is:

• Reduced time and cost

• Built-in security from the ground up

• Increased vulnerabilities

• Decreased functionality

Answer explanation

Built-in security from the ground up is a benefit of intrinsic assurance through software design.

Activities that provide confidence in risk management processes are known as:

• Classification

• Assurance

• Governance

• Incident response

Answer explanation

Activities that provide confidence in risk management processes are known as Assurance.

Governance in risk management involves:

• Ignoring risk management activities

• Establishing a framework aligned with business strategy

• Randomly choosing risk mitigation strategies

• Avoiding any risk assessment

Answer explanation

Governance in risk management involves establishing a framework aligned with business strategy, not ignoring risk management activities, randomly choosing risk mitigation strategies, or avoiding risk assessment.