Chapter 4 Assessment

Question 1

Risk management is responding to a negative

event when it occurs.

Answer 1

True

Question 2

With respect to IT security, a risk can result in

either a positive or a negative effect.

Answer 2

True

Question 3

According to PMI, which term describes the list of

identified risks?

Answer 3

Risk registe

Question 4

What is the primary purpose of a business impact

analysis (BIA)

Answer 4

All of the above–
A. To identify, categorize, and prioritize mission
critical business functions
B. To provide a road map for business continuity
and disaster recovery planning
C. To assist organizations with risk management
D. To assist organizations with incident response
planning

Question 5

Which of the following terms defines the amount
of time it takes to recover a production IT system,
application, and access to data?

Answer 5

Recovery time objective

Question 6

The recovery point objective (RPO) defines the
last point in time for _______ recovery that can be
enabled back into production.

Answer 6

Data

Question 7

Which of the following solutions are used for
authenticating a user to gain access to systems,
applications, and data?

Answer 7

All of the above--
A. Passwords and PINs
B. Smart cards and tokens
C. Biometric devices
D. Digital certificates

Question 8

Which risk management approach requires a dis
tributed approach with business units working
with the IT organization?

Answer 8

OCTAVE

Question 9

The NIST SP800-30 standard is a _______________
management framework standard for performing
risk management.

Answer 9

Risk

Question 10

Which term indicates the maximum amount of

data loss over a time period?

Answer 10

RPO

Question 11

Organizations that permit their employees to use
their own laptops or smartphone devices and
connect to the IT infrastructure describe a policy
referred to as:

Answer 11

BYOD

Question 12

Which of the following are organizational concerns for BYOD and mobility?

Answer 12

None of the above

Question 13

__ __ is the U.S. security-related act that governs

regulated health care information.

Answer 13

HIPAA

Question 14

Which U.S. security-related act governs the security of data specifically for the financial industry

Answer 14

GLBA

Question 15

Which of the following business drivers are impacting businesses’ and organizations’ security
requirements and implementations?

Answer 15

All of the above -
A. Mobility
B. Regulatory compliance
C. Productivity enhancements
D. Always-on connectivity