You have implemented a new security control. Which of the following risk strategy options have you engaged in?

• A.Risk Transfer
• B.Risk Mitigation
• C.Risk Avoidance
• D.Risk Acceptance

Comment: *

Name: *

Email: *

Verification: *

The formal certification and accreditation process has four primary steps, what are they?

• A.Evaluating, purchasing, testing, authorizing
• B.Discovery, testing, authorizing, certifying
• C.Evaluating, describing, testing and authorizing
• D.Auditing, documenting, verifying, certifying

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MAIN reason to follow a formal risk management process in an organization that hosts and uses privately identifiable information (PII) as part of their business models and processes?

• A.Need to transfer the risk associated with hosting PII data
• B.Fiduciary responsibility to safeguard credit card information
• C.Need to better understand the risk associated with using PII data
• D.Need to comply with breach disclosure laws

Comment: *

Name: *

Email: *

Verification: *

Who is responsible for securing networks during a security incident?

• A.Disaster Recovery (DR) manager
• B.Security Operations Center (SOC)
• C.Chief Information Security Officer (CISO)
• D.Incident response Team (IRT)

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a weakness of an asset or group of assets that can be exploited by one or more threats?

• A.Exploitation
• B.Vulnerability
• C.Attack vector
• D.Threat

Comment: *

Name: *

Email: *

Verification: *