Free IT-RISK-FUNDAMENTALS Exam Dumps Preview

Question 1

Single choice

Which of the following presents the GREATEST risk for the continued existence of an enterprise?

1. A

   When its risk appetite and tolerance are reviewed annually

2. B

   When its actual risk eventually exceeds organizational risk appetite

3. C

   When its risk appetite and actual risk exceed its risk capacity

Reveal answer details Close answer details

Correct answerC

Question 2

Single choice

An enterprise has moved its data center from a flood-prone area where it had experienced significant service disruptions to one that is not a flood zone.

Which risk response strategy has the organization selected?

1. A

   Risk mitigation

2. B

   Risk transfer

3. C

   Risk avoidance

Reveal answer details Close answer details

Correct answerC

Question 3

Single choice

Which of the following includes potential risk events and the associated impact?

1. A

   Risk scenario

2. B

   Risk policy

3. C

   Risk profile

Reveal answer details Close answer details

Correct answerA

Question 4

Single choice

Which of the following is the BEST indication of a good risk culture?

1. A

   The enterprise learns from negative outcomes and treats the root cause.

2. B

   The enterprise enables discussions of risk and facts within the risk management functions.

3. C

   The enterprise places a strong emphasis on the positive and negative elements of risk.

Reveal answer details Close answer details

Correct answerA

Question 5

Single choice

Which of the following is the MAIN reason to include previously overlooked risk in a risk report?

1. A

   Assurance is needed that the risk dashboard is complete and comprehensive.

2. B

   Overlooked or ignored risk may become relevant in the future.

3. C

   The risk report must contain the current state of all risk.

Reveal answer details Close answer details

Correct answerA

Question 6

Single choice

Which risk response option has been adopted when an enterprise outsources disaster recovery activities to leverage the skills and expertise of a third-party provider?

1. A

   Risk mitigation

2. B

   Risk avoidance

3. C

   Risk transfer

Reveal answer details Close answer details

Correct answerC

Question 7

Single choice

Which of the following is the PRIMARY objective of vulnerability assessments?

1. A

   To determine the best course of action based on the threat and potential impact

2. B

   To improve the knowledge of deficient control conditions within IT systems

3. C

   To reduce the amount of effort to identify and catalog new vulnerabilities

Reveal answer details Close answer details

Correct answerB

Question 8

Single choice

Which of the following should be found in an I&T asset inventory to help inform the risk identification process?

1. A

   Loss scenario information for assets

2. B

   Security classification of assets

3. C

   Regulatory requirements of assets

Reveal answer details Close answer details

Correct answerB

Question 9

Single choice

As part of an I&T related risk assessment, which of the following should be reviewed to obtain an initial view of overall I&T related risk for the enterprise?

1. A

   Threats and vulnerabilities for each risk factor identified

2. B

   Components of the risk register with remediation plans

3. C

   Components of the risk universe at a high level

Reveal answer details Close answer details

Correct answerC

Question 10

Single choice

Which of the following is of GREATEST concern when aggregating risk information in management reports?

1. A

   Duplicating details of risk status

2. B

   Obfuscating the reasons behind risk

3. C

   Generalizing acceptable risk levels

Reveal answer details Close answer details

Correct answerB

Question 11

Single choice

Which of the following is the MAIN advantage of a risk taxonomy?

1. A

   It enables risk quantification.

2. B

   It provides a scheme for classifying categories of risk.

3. C

   It promotes alignment with industry best practices for risk management.

Reveal answer details Close answer details

Correct answerB

Question 12

Single choice

Which of the following is the GREATEST benefit of effective asset valuation?

1. A

   It protects the enterprise from paying more for protection than the net worth of the asset.

2. B

   It assures that asset valuation is consistently applied to all assets across the enterprise.

3. C

   It ensures assets are linked to processes and classified based on business value.

Reveal answer details Close answer details

Correct answerC

Question 13

Single choice

What is the FIRST step in the risk response process?

1. A

   Prioritize responses based on impact.

2. B

   Review risk analysis.

3. C

   Review risk appetite.

Reveal answer details Close answer details

Correct answerB

Question 14

Single choice

What is the basis for determining the sensitivity of an IT asset?

1. A

   Potential damage to the business due to unauthorized disclosure

2. B

   Cost to replace the asset if lost, damaged, or deemed obsolete

3. C

   Importance of the asset to the business

Reveal answer details Close answer details

Correct answerA

Question 15

Single choice

Which of the following is an example of a tangible and assessable representation of risk?

1. A

   Enterprise risk policy

2. B

   Risk treatment plan

3. C

   Risk scenario

Reveal answer details Close answer details

Correct answerC

Question 16

Single choice

Detailed risk management reports should be targeted to a specific audience based on:

1. A

   need to know.

2. B

   industry benchmarks.

3. C

   seniority levels in the enterprise.

Reveal answer details Close answer details

Correct answerA

Question 17

Single choice

Which of the following is an example of a preventive control?

1. A

   File integrity monitoring (FIM) on personal database stores

2. B

   Air conditioning systems with excess capacity to permit failure of certain components

3. C

   Data management checks on sensitive data processing procedures

Reveal answer details Close answer details

Correct answerC

Question 18

Single choice

When analyzing l&T-related risk, an enterprise defines likelihood and impact on a scale from 1 to 5, and the scale of impact also defines a range expressed in monetary terms.

Which of the following risk analysis approaches has been adopted?

1. A

   Qualitative approach

2. B

   Quantitative approach

3. C

   Hybrid approach

Reveal answer details Close answer details

Correct answerC