Which of the following BEST indicates how well a web infrastructure protects critical information from an attacker?

• A.Failed login attempts
• B.Absence of IT audit findings
• C.Penetration test
• D.Simulating a denial of service attack

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be the BEST justification to invest in the development of a governance, risk, and compliance (GRC) solution?

• A.Facilitating risk-aware decision making by stakeholders.
• B.Demonstrating management commitment to mitigate risk.
• C.Closing audit findings on a timely basis.
• D.Ensuring compliance to industry standards.

Comment: *

Name: *

Email: *

Verification: *

Billy is the project manager of the HAR Project and is in month six of the project. The project is scheduled to last for 18 months.
Management asks Billy how often the project team is participating in risk reassessment in this project. What should Billy tell management if he's following the best practices for risk management?

• A.Project risk management has been concluded with the project planning.
• B.Project risk management happens at every milestone.
• C.Project risk management is scheduled for every month in the 18-month project.
• D.At every status meeting the project team project risk management is an agenda item.
• E.Explanation:
  Risk management is an ongoing project activity. It should be an agenda item at every project
  status meeting.
• F.is incorrect. Milestones are good times to do reviews, but risk management should
  happen frequently.
• G.is incorrect. This answer would only be correct if the project has a status meeting just
  once per month in the project.

Comment: *

Name: *

Email: *

Verification: *

The MOST effective way to increase the likelihood that risk responses will be implemented is to:

• A.review progress reports
• B.create an action plan
• C.perform regular audits
• D.assign ownership

Comment: *

Name: *

Email: *

Verification: *

You have been assigned as the Project Manager for a new project that involves development of a new interface for your existing time management system. You have completed identifying all possible risks along with the stakeholders and team and have calculated the probability and impact of these risks. Which of the following would you need next to help you prioritize the risks?

• A.Affinity Diagram
• B.Risk rating rules
• C.Project Network Diagram
• D.Risk categories
• E.Explanation:
  Risk rating rules define how to prioritize risks after the related probability and impact values are calculated. These are generally included in the organizational process assets and are refined for individual projects.

Comment: *

Name: *

Email: *

Verification: *