Part 2

Question 1

Which risk is eliminated in an organization that is
100% compliant?

A. having confidential information become public
B. having an advanced persistent threat change your
information.
C. having the regulator punish you for being
non-compliant.
D. having malicious insiders steal information

Answer 1

C. having the regulator punish you for being
non-compliant.

Question 2

What does CVE mean?

A. Computer Vulnerabilities and their Exploits
B. Computer Vulnerabilities and Exposures
C. Common Vulnerabilities and Their Exploits
D. Common Vulnerabilities and Exposures

Answer 2

D. Common Vulnerabilities and Exposures

Question 3

What is the difference between CVE and CVSS?

A. CVE tells you what the vulnerabilities are. CVSS
gives vulnerabilities a score (0-10) to evaluate how
serious they are.
B. CVE is on a scale of low, medium, high, critical.
CVSS is on a scale of 0-100.
C. CVSS tells you what the vulnerabilities are. CVE
gives vulnerabilities a score (0-10) to evaluate how
serious they are.
D. CVE is on a scale of 0-100. CVSS is on a scale of
0-10.

Answer 3

A. CVE tells you what the vulnerabilities are. CVSS
gives vulnerabilities a score (0-10) to evaluate how
serious they are.