- All Exams Instant Download
What is the process for selecting and implementing measures to impact risk called?
What is the process for selecting and implementing measures to impact risk called?A . Risk TreatmentB . ControlC . Risk AssessmentD . Risk ManagementView AnswerAnswer: A Explanation: The process for selecting and implementing measures for impacting risk in the environment is called risk treatment. Incorrect Answers: C: The process of...
What is the primary advantage to group risks by common causes during qualitative risk analysis?
Courtney is the project manager for her organization. She is working with the project team to complete the qualitative risk analysis for her project. During the analysis Courtney encourages the project team to begin the grouping of identified risks by common causes. What is the primary advantage to group risks...
Which one of the following components is likely to be updated in the risk register based on their analysis?
Your project team has completed the quantitative risk analysis for your project work. Based on their findings, they need to update the risk register with several pieces of information. Which one of the following components is likely to be updated in the risk register based on their analysis?A . Listing...
Which of the following BEST ensures that a firewall is configured in compliance with an enterprise's security policy?
Which of the following BEST ensures that a firewall is configured in compliance with an enterprise's security policy?A . Interview the firewall administrator.B . Review the actual procedures.C . Review the device's log file for recent attacks.D . Review the parameter settings.View AnswerAnswer: D Explanation: A review of the parameter...
Which of the following is NOT true for risk management capability maturity level 1?
Which of the following is NOT true for risk management capability maturity level 1?A . There is an understanding that risk is important and needs to be managed, but it is viewed as a technical issue and the business primarily considers the downside of IT riskB . Decisions involving risk...
What is the PRIMARY need for effectively assessing controls?
What is the PRIMARY need for effectively assessing controls?A . Control's alignment with operating environmentB . Control's design effectivenessC . Control's objective achievementD . Control's operating effectivenessView AnswerAnswer: C Explanation: Controls can be effectively assessed only by determining how accurately the control objective is achieved within the environment in which...
If your organization seizes this opportunity it would be an example of what risk response?
Your project is an agricultural-based project that deals with plant irrigation systems. You have discovered a byproduct in your project that your organization could use to make a profit. If your organization seizes this opportunity it would be an example of what risk response?A . EnhancingB . PositiveC . OpportunisticD...
Which of the following is the MOST effective method for indicating that the risk level is approaching a high or unacceptable level of risk?
Which of the following is the MOST effective method for indicating that the risk level is approaching a high or unacceptable level of risk?A . Risk registerB . Cause and effect diagramC . Risk indicatorD . Return on investmentView AnswerAnswer: C Explanation: Risk indicators are metrics used to indicate risk...
Which of the following represents lack of adequate controls?
Which of the following represents lack of adequate controls?A . VulnerabilityB . ThreatC . AssetD . ImpactView AnswerAnswer: A Explanation: Vulnerability is a weakness or lack of safeguard that can be exploited by a threat, thus causing harm to the information systems or networks. It can exist in hardware, operating...
What approach can you use to achieve this goal of improving the project's performance through risk analysis with your project stakeholders?
You work as a project manager for BlueWell Inc. Management has asked you to work with the key project stakeholder to analyze the risk events you have identified in the project. They would like you to analyze the project risks with a goal of improving the project's performance as a...
