WorksheetsUnit 11: Risk Assessments
Total questions: 12
Worksheet time: 6mins
Which of the following are measures for risk probability?
Very likely, likely, unlikely
Low, medium, high, extreme
Minor, moderate, major
All the time, often, seldom
Which of the following are measures for risk impact?
Very likely, likely, unlikely
Low, medium, high, extreme
Minor, moderate, major
All the time, often, seldom
Which of the following are measures for risk severity?
Very likely, likely, unlikely
Low, medium, high, extreme
Minor, moderate, major
All the time, often, seldom
A risk is...
a threat that could result in some form of loss at some point in time
a strategy board game of diplomacy, conflict and conquest
something bad that can happen to a computer network
playing the national lottery
Probing a computer network / port scanning is an example of a risk that has...
Minor impact
Moderate impact
Major impact
Extreme impact
Hacking, viruses, or other malicious cyber activity such as a denial of service (DOS) are examples of attacks with a...
Minor impact
Moderate impact
Major impact
Extreme impact
What's wrong with this answer?
Threat number too low.
Threat title doesn't make sense.
Potential size of loss should be just minor or just moderate.
Probability is using a wrong key term.
What's wrong with this answer?
Threat number too low.
Threat title is not actually a threat.
Severity should be extreme.
Probability should be unlikely.
A risk that can affect all networks / IT systems is...
generic
implied
specified
random
A risk that is explicitly identified in the brief is...
generic
implied
specified
random
In the set task, providing mainly generic risks will result in a low mark for the first activity.
True
False
In the set task risk assessment, top marks can be gained by using logical chains of reasoning. But what are logical chains of reasoning?
Where you link threats with their solution and your recommendations
Where you say "because" to explain each threat
Where you chain different threats together
Where you link the scenario to possible threats and the implications
of those threats
