What is the primary goal of the defense risk treatment strategy?

• To prevent the exploitation of vulnerabilities

• To shift risk to another entity

• To remove the asset from the environment

• To accept the risk as it is

Which risk treatment strategy involves planning to reduce the impact of an incident?

• Termination

• Transference

• Mitigation

• Acceptance

What does the acceptance risk treatment strategy entail?

• Implementing new controls

• Doing nothing beyond the current level of protection

• Shifting risk to another entity

• Removing the asset from the environment

What is a Service Level Agreement (SLA) primarily used for?

• To shift risk to another entity

• To define the organization's risk appetite

• To guarantee security levels from external organizations

• To assess the impact of an attack

Which of the following is NOT one of the five basic risk treatment strategies?

• Mitigation

• Transference

• Defense

• Evaluation

What does the term 'residual risk' refer to?

• Risk that is transferred to another entity

• Remaining risk after controls have been implemented

• Risk that is accepted without analysis

• Risk that has been completely eliminated

What is the purpose of asset valuation?

• To determine the risk appetite of an organization

• To assign financial value to information assets

• To identify vulnerabilities in the system

• To evaluate the effectiveness of controls

What does the term 'annualized loss expectancy' (ALE) represent?

• The total cost of implementing controls

• The value of an information asset

• The likelihood of an attack occurring

• The potential loss per year from a risk

Which risk treatment strategy involves removing an asset from the environment?

• Defense

• Transference

• Mitigation

• Termination

What is the main focus of the mitigation risk treatment strategy?

• Preventing exploitation of vulnerabilities

• Planning and preparation for incidents

• Accepting the risk as it is

• Shifting risk to another entity