ENDKA 1

What stages does the risk management process include? Choose the correct chain.

• Risk identification - Risk assessment - Defining risk tolerance and appetite - Risk mitigation measures

• Risk identification - Risk assessment - Risk prioritization - Defining risk tolerance and appetite - Risk mitigation measures

• Risk identification - Risk prioritization - Risk assessment - Defining risk tolerance and appetite - Risk mitigation measures

A company performs a backup strategy where the first backup copies all data, and subsequent backups copy only the changes made since the last full backup, without relying on other intermediate backups. Which type of backup is this?

• Full Backup

• Incremental Backup

• Differential Backup

Which of the following situations is an example of outsource onsite IT service delivery?

• A company hires an external IT provider to work directly at the company's headquarters

• A company establishes its own IT team at a foreign location to handle local IT operations

• An organization contracts a foreign IT vendor to deliver services from their home country

• A business opens an offshore development center to manage internal IT services

Which of the following situations is an example of insourced offshore IT service delivery?

• An international company opens its own development center in another country for performing IT services.

• The company signs a contract with a local IT firm to provide technical support.

• An IT company engages a foreign contractor to perform software developments.

• The company sets up a joint venture with a local firm to manage IT services in another country.

Choose the correct chain for developing performance metrics:

• Identify expected outputs - Process to compare actual output with target - Identify critical processes

• Identify expected outputs - Identify critical processes - Process to compare actual output with target

• Identify critical processes - Process to compare actual output with target - Identify expected outputs

• Identify critical processes - Identify expected outputs - Process to compare actual output with target

Which of the following processes can be described as: "This is a process that aims to provide adequate confidence that an item or product conforms to the requirements developed. QA staff verify that changes to the system are approved, checked, and implemented in a controlled manner"?

• Quality Assurance

• Quality Control

• IT Balance Scorecard

• User Acceptance Testing

Which of the following processes can be described as: “This is a method for performing tests or reviews to verify that the product is free of defects and meets the user’s requirements?”

• Quality Assurance

• Quality Control

• IT Balance Scorecard

• User Acceptance Testing

Which of the following is relevant to the results of a Business Impact Analysis (BIA)?

• Estimating the cost of downtime and developing alternative data collection methods

• Identify key business processes and their recovery times

• Analyzing risks and developing strategies to minimize them

• Developing the company's information security policy

Which type of systems can be described as: "These functions can be performed manually, at a tolerable cost and for an extended period of time. While they can be performed manually, it usually is a difficult process and requires additional staff to perform"?

• Vital

• Sensitive

• Critical

• Non-sensitive

Which type of systems can be described as: “Functions of this system cannot be performed unless they are replaced by identical capabilities. Critical applications cannot be replaced by manual methods. Tolerance to interruption is very low; therefore, cost of interruption is very high.”

• Vital

• Sensitive

• Critical

• Non-sensitive