IT Risk Management Quiz

What stages does the risk management process include? Choose the correct chain:

• Risk identification - Risk assessment - Defining risk tolerance and appetite - Risk mitigation measures

• Risk identification - Risk assessment - Risk prioritization - Defining risk tolerance and appetite - Risk mitigation measures

• Risk identification - Risk prioritization - Risk assessment - Defining risk tolerance and appetite - Risk mitigation measures

A company performs a backup strategy where the first backup copies all data, and subsequent backups copy only the changes made since the last full backup, without relying on other intermediate backups. Which type of backup is this?

• Full Backup

• Incremental Backup

• Differential Backup

Which of the following situations is an example of insourced offshore IT service delivery?

• An international company opens its own development center in another country for performing IT services.

• The company signs a contract with a local IT firm to provide technical support.

• An IT company engages a foreign contractor to perform software developments.

• The company sets up a joint venture with a local firm to manage IT services in another country.

Choose the correct chain for developing performance metrics:

• Identify expected outputs – process to compare actual output with target – identify critical processes

• Identify expected outputs - identify critical processes - process to compare actual output with target

• Identify critical processes - process to compare actual output with target - Identify expected outputs

• Identify critical processes - Identify expected outputs - process to compare actual output with target

Which of the following processes can be described as: “This is a method for performing tests or reviews to verify that the product is free of defects and meets the user’s requirements?”

• Quality assurance

• Quality control

• IT balance scorecard

• User acceptance testing

Which of the following is relevant to the results of a Business Impact Analysis (BIA)?

• Estimating the cost of downtime and developing alternative data collection methods.

• Identify key business processes and their recovery times.

• Analyzing risks and developing strategies to minimize them.

• Developing the company's information security policy.

Which type of systems can be described as: “Functions of this system cannot be performed unless they are replaced by identical capabilities. Critical applications cannot be replaced by manual methods. Tolerance to interruption is very low; therefore, cost of interruption is very high.”

• Vital

• Sensitive

• Critical

• Non-sensitive

What is system resiliency?

• The ability of a system to prevent unauthorized access and ensure data security.

• The capability of a system to adapt, recover, and maintain functionality after disruptions.

• The speed at which a system can process large amounts of data under high load conditions.

• The process of continuously upgrading system hardware and software to avoid failures.

A company has implemented a clustered database system. In this system, all nodes process requests simultaneously, distributing the load and ensuring high availability. Which cluster configuration is being used?

• Active-Passive

• Active-Active

• Primary-Secondary

• Fault-Tolerant

Which type of document is described in following statement: ”A third-party expert opinion on the organization's compliance with the essential requirements and the provision of appropriate controls”

• SOC

• SLA

• MDA

• SOW