Information Assurance and Security Final Term Quiz 1

What term describes the potential for loss or damage when a threat exploits a vulnerability?

• Impact

• Weakness

• Risk

• Threat

When assessing risk, what does 'asset value' refer to?

• Cost of the asset

• Importance of the asset to the organization

• Market price of the asset

• Depreciation of the asset

What does the term 'threat' mean in risk management?

• A potential occurrence or event that could exploit a vulnerability and cause harm.

• A weakness or a flaw in a system, a process, or a piece of code that can potentially be exploited by an attacker

• A type of vulnerability

• A potential impact of exploiting a vulnerability, causing harm to an organization, individual, or asset.

In the context of information security, a vulnerability is:

• A potential threat

• A weakness that can be exploited

• A type of attack

• An organizational policy

Which of the following is NOT a type of risk control strategy?

• Mitigation

• Acceptance

• Transfer

• Ignore

Which of the following is NOT a step in the risk management process?

• Risk identification

• Risk avoidance

• Risk assessment

• Risk control

What is the first step in risk management?

• Risk assessment

• Risk control

• Risk identification

• Risk mitigation

What does risk management aim to reduce?

• Costs

• Time

• Risks to an acceptable level

• Resources

What type of data classification is considered the most sensitive?

• Internal

• Public

• Confidential

• External

It is a model that quantitatively assesses the severity of a cyberthreat using a scaled rating system that assigns numerical values to risk categories

• DREAD

• STRIDE

• PASTA

• OCTAVE