Part 15

Question 1

Which of the following threats would be classified as the actions of a hactivist?

a) external threat
b) internal threat
c) environmental threat
d) compliance threat

Answer 1

external threat

Question 2

Which of these is not a response to risk?
A) mitigation
b) transference
c) resistance
d) avoidance

Answer 2

resistance

Question 3

Which of the following is not a threat classification category?

a) compliance
b) financial
c) tactical
d) strategic

Answer 3

tactical

Question 4

In which of the following threat classifications would a power blackout be classified?

a) operational
b) managerial
c) technical
d) strategic

Answer 4

operational

Question 5

Which of the following approaches to risk calculation typically assigns a numeric value (1-10) or label (high, medium, or low) to represent a risk?

a) quantitative risk calculation
b) qualitative risk calculation
c) rule-based risk calculation
d) policy based risk calculation

Answer 5

qualitative risk calculation

Question 6

What is a list of potential threats and associated risks?

Answer 6

risk register

Question 7

Giovanni is completing a report on risks. To which risk option would he classify the action that the organization has decided not to construct a new data center because it would be located in an earthquake one?

a) transference
b) avoidance
c) rejection
d) prevention

Answer 7

avoidance

Question 8

Which of the following control categories includes conducting workshops to help users resist phishing attacks?

a) managerial
b) operational
c) technical
d) administrative

Answer 8

operational

Question 9

Emiliano needs to determine the expected monetary loss every time a risk occurs. Which formula will he use?

a. AV
b. SLE
c. ARO
d. ALE

Answer 9

SLE

Question 10

Enzo is reviewing the financial statements and has discovered a serious misstatement. What type of risk has he found?

Answer 10

control risk

Question 11

Simona needs to research a control that attempts to discourage security violation before they occur. Which control will she research?

Answer 11

deterrent control

Question 12

Which of the following is not legally enforceable agreement but is still more formal than an unwritten agreement?
BPA
SLA
MOU
MSA

Answer 12

MOU

Question 13

Angelo has received notification that a business partner will no longer sell or update a specific product. What type of notification is this?

Answer 13

EOP

Question 14

Which of the following is NOT concern for users regarding the usage of their privacy data?
associations with groups
individual inconviniences and identity theft
timeliness of data
statistical inferences

Answer 14

timeliness of data

Question 15

Which of the following is not a consequence to an  organization that has suffered a data security breach?
reputation damage
IP theft
de-escalation of reporting requirements
monetary fine

Answer 15

de-escalation of reporting requirements

Question 16

Which of the following data types the highest level of data sensitivity?
private
secure
sensitive
confidential

Answer 16

confidential

Question 17

Sergio has been asked to make a set of data that was once restricted now available to any users. What data type will Sergio apply to this set of data?

Answer 17

public

Question 18

Which of the following uses data anonymization?
tokenization
data masking
data minimization
data obfuscation sanitization (DOS)

Answer 18

data masking

Question 19

Which of the following is NOT true about data sovereignty?
data sovereignty is concept that until recently was less of an issue
generally, data is subject to laws of the country in which it is collected or processed.
governments cannot force companies to store data within specific countries
regulations are not necessarily on where the organization is headquartered

Answer 19

governments cannot force companies to store data within specific countries

Question 20

Bob needs to create an agreement between his company and a third-party organization that demonstrates a “convergence of will” between the parties so that they can work together. Which type of agreement will Bob use?

Answer 20

MOU