You are working in an enterprise. Your enterprise owned various risks. Which among the following is MOST likely to own the risk to an information system that supports a critical business process?

• A.System users
• B.Senior management
• C.IT director
• D.Risk management department

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to determine whether new controls mitigate security gaps in a business system?

• A.Measure the change in inherent risk.
• B.Complete an offsite business continuity exercise.
• C.Perform a vulnerability assessment.
• D.Conduct a compliance check against standards.

Comment: *

Name: *

Email: *

Verification: *

An organization has been notified that a dis grunted, terminated IT administrator has tried to break into the corporate network. Which of the following discoveries should be of GREATEST concern to the organization?

• A.A brute force attack has been detected
• B.An external vulnerability scan has been detected
• C.An increase in support request has been observed
• D.Authentication logs have been disabled

Comment: *

Name: *

Email: *

Verification: *

An organization is planning to move its application infrastructure from on-premises to the cloud. Which of the following is the BEST course of the actin to address the risk associated with data transfer if the relationship is terminated with the vendor?

• A.Work closely with the information security officer to ensure the company has the proper security controls in place.
• B.Collect requirements for the environment to ensure the infrastructure as a service (IaaS) is configured appropriately.
• C.Ensure the language in the contract explicitly states who is accountable for each step of the data transfer process
• D.Meet with the business leaders to ensure the classification of their transferred data is in place

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of HWD project. It requires installation of some electrical machines. You and the project team decided to hire an electrician as electrical work can be too dangerous to perform. What type of risk response are you following?

• A.Avoidance
• B.Transference
• C.Mitigation
• D.Acceptance
• E.Explanation:
  As the risk is transferred to the third party (electrician), hence this type of risk response is transference.

Comment: *

Name: *

Email: *

Verification: *