Risk Analysis and Management Quiz (Chapter 6)

What is the first phase of the risk management process?

• Assessment

• Analysis

• Response

• Mitigation

Which of the following is a method of risk analysis that uses numeric values?

• Descriptive

• Semi-qualitative

• Quantitative

• Qualitative

What does the term 'MTD' stand for in risk management?

• Mean Time to Detect

• Maximum Tolerable Downtime

• Mean Time to Downtime

• Minimum Time to Disaster

Which response technique involves acknowledging the risk without eliminating it?

• Avoid

• Transfer

• Mitigate

• Accept

What type of control involves hardware or software installations to prevent threats?

• Operational controls

• Management controls

• Technical controls

• Loss/damage controls

Which of the following is NOT a phase of risk analysis?

• Risk Acceptance

• Countermeasure Determination

• Impact Analysis

• Vulnerability ID

What is the purpose of a Business Impact Analysis (BIA)?

• To assess employee performance

• To identify organizational risks

• To eliminate all risks

• To transfer risks to third parties

Which of the following describes a natural threat?

• Unintentional human activity

• Weather-related events

• System vulnerabilities

• Intentional human activity

What does 'RPO' stand for in the context of data recovery?

• Recovery Point Objective

• Recovery Process Objective

• Response Point Objective

• Risk Point Objective

Rohan is planning a school event and wants to ensure that there are no risks involved. Which risk response technique involves eliminating the risk altogether?

• Avoid

• Transfer

• Accept

• Mitigate