Quiz on Risk Management, Response, and Recovery

What is the primary aim of risk management?

• To eliminate all risks completely

• To detect potential issues before they arise

• To increase the number of risks in a project

• To ignore minor risks

Which of the following is NOT a component of risk identification?

• Establishing a marketing strategy

• Prioritizing information assets

• Identification of hardware properties

• Categorization of information system elements

What does the term 'Residual risk' refer to?

• The risk that is transferred to another party

• The risk that remains after controls are implemented

• The risk that is ignored

• The risk that is completely eliminated

Which strategy is used to enhance positive risks?

• Transfer

• Mitigate

• Avoid

• Exploit

What is the purpose of a Business Continuity Plan (BCP)?

• To eliminate all risks

• To help the business process continue during emergencies

• To ensure data is backed up

• To create a marketing plan

What does MTD stand for in the context of business continuity?

• Maximum Tolerable Downtime

• Minimum Tolerable Data

• Minimum Time Delay

• Maximum Time Duration

Which of the following is a type of backup?

• Full backup

• Partial backup

• Incremental backup

• Both Full and Incremental backup

What is the first phase of incident response?

• Preparation

• Eradication

• Recovery

• Containment

Which of the following is a method to test a Business Continuity Plan?

• Employee Satisfaction Survey

• Market Analysis

• Full Recovery Test

• Financial Audit

What is the main goal of risk response?

• To increase project costs

• To develop strategic options and identify actions

• To eliminate all project opportunities

• To ignore all risks