John works as a project manager for BlueWell Inc. He is determining which risks can affect the project. Which of the following inputs of the identify risks process is useful in identifying risks associated to the time allowances for the activities or projects as a whole, with a width of the range indicating the degrees of risk?

• A.Activity duration estimates
• B.Activity cost estimates
• C.Risk management plan
• D.Schedule management plan

Comment: *

Name: *

Email: *

Verification: *

A risk practitioner has received an updated enterprise risk management (ERM) report showing that residual risk is now within the organization's defined appetite and tolerance levels. Which of the following is the risk practitioner's BEST course of action?

• A.Verify the adequacy of risk monitoring plans.
• B.Identify new risk entries to include in ERM.
• C.Remove the risk entries from the ERM register.
• D.Re-perform the risk assessment to confirm results.

Comment: *

Name: *

Email: *

Verification: *

As part of an overall IT risk management plan, an IT risk register BEST helps management:

• A.understand the organizational risk profile.
• B.communicate the enterprise risk management policy.
• C.align IT processes with business objectives.
• D.stay current with existing control status.

Comment: *

Name: *

Email: *

Verification: *

Which of the following are the principles of access controls?
Each correct answer represents a complete solution. Choose three.

• A.Confidentiality
• B.Availability
• C.Reliability
• D.Integrity

Correct Answer: A,B,D

Explanation/Reference:
Explanation:
The principles of access controls focus on availability, integrity, and confidentiality, as loss or danger is directly related to these three:
Loss of confidentiality- Someone sees a password or a company's secret formula, this is referred to as

loss of confidentiality.
Loss of integrity- An e-mail message is modified in transit, a virus infects a file, or someone makes

unauthorized changes to a Web site is referred to as loss of integrity.
Loss of availability- An e-mail server is down and no one has e-mail access, or a file server is down so

data files aren't available comes under loss of availability.

Comment: *

Name: *

Email: *

Verification: *

An identified high probability risk scenario involving a critical, proprietary business function has an annualized cost of control higher than the annual loss expectancy. Which of the following is the BEST risk response?

• A.Avoid
• B.Transfer
• C.Accept
• D.Mitigate

Comment: *

Name: *

Email: *

Verification: *