When developing IT risk scenarios, it is MOST important to consider:

• A.the organization's threat profile.
• B.external audit findings.
• C.executive management directives.
• D.organizational objectives.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be an IT business owner's BEST course of action following an unexpected increase in emergency changes?

• A.Conducting a root-cause analysis
• B.Validating the adequacy of current processes
• C.Evaluating the impact to control objectives
• D.Reconfiguring the IT infrastructure

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be the MAIN consideration when validating an organization's risk appetite?

• A.Capacity to withstand loss
• B.Cost of risk mitigation options
• C.Comparison against regulations
• D.Maturity of the risk culture

Comment: *

Name: *

Email: *

Verification: *

You are the risk professional of your enterprise. You need to calculate potential revenue loss if a certain risks occurs. Your enterprise has an electronic (e-commerce) web site that is producing US $1 million of revenue each day, then if a denial of service (DoS) attack occurs that lasts half a day creates how much loss?

• A.US $250,000 loss
• B.US $500,000 loss
• C.US $1 million loss
• D.US $100,000 loss
• E.Explanation:
  Denial-of-service attack (DoS attack) or distributed denial-of-service attack (DDoS attack) is an attempt to make a computer resource unavailable to its intended users. Although the means to carry out, motives for, and targets of a DoS attack may vary, it generally consists of the concerted efforts of person or persons to prevent an Internet site or service from functioning efficiently or at all, temporarily or indefinitely. Perpetrators of DoS attacks typically target sites or services hosted on high-profile web servers such as banks, credit card payment gateways, and even root name-servers. The term is generally used with regards tocomputer networks, but is not limited to this field; for example, it is also used in reference to CPU resource managementAs the total revenue of the website for the day is $1 million, and due to denial of service attack it is unavailable for half day. Therefore, Revenue loss= $1,000,000/2 = $500,000

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST help to ensure that identified risk is efficiently managed?

• A.Reviewing the maturity of the control environment
• B.Maintaining a key risk indicator for each asset in the risk register
• C.Regularly monitoring the project plan
• D.Periodically reviewing controls per the risk treatment plan

Comment: *

Name: *

Email: *

Verification: *