Which of the following is MOST important when developing key performance indicators (KPIs)?

• A.Alignment to management reports
• B.Alignment to risk responses
• C.Alerts when risk thresholds are reached
• D.Identification of trends

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST risk associated with an environment that lacks documentation of the architecture?

• A.Unknown vulnerabilities
• B.Legacy technology systems
• C.Network isolation
• D.Overlapping threats

Comment: *

Name: *

Email: *

Verification: *

You are preparing to complete the quantitative risk analysis process with your project team and several subject matter experts. You gather the necessary inputs including the project's cost management plan. Why is it necessary to include the project's cost management plan in the preparation for the quantitative risk analysis process?

• A.The project's cost management plan provides control that may help determine the structure for quantitative analysis of the budget.
• B.The project's cost management plan can help you to determine what the total cost of the project is allowed to be.
• C.The project's cost management plan provides direction on how costs may be changed due to identified risks.
• D.The project's cost management plan is not an input to the quantitative risk analysis process.
• E.Explanation:
  The cost management plan is an input to the quantitative risk analysis process because of the cost management control it provides. The cost management plan sets how the costs on a project are managed during the project's lifecycle. It defines the format and principles by which the project costs are measured, reported, and controlled. The cost management plan identifies the person responsible for managing costs, those who have the authority to approve changes to the project or its budget, and how cost performance is quantitatively calculated and reported upon.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST provides an early warning that network access of terminated employees is not being revoked in accordance with the service level agreement (SLA)?

• A.Monitoring key access control performance indicators
• B.Revising the service level agreement (SLA)
• C.Updating multi-factor authentication
• D.Analyzing access control logs for suspicious activity

Comment: *

Name: *

Email: *

Verification: *

The best way to test the operational effectiveness of a data backup procedure is to:

• A.inspect a selection of audit trails and backup logs
• B.conduct an audit of files stored offsite
• C.demonstrate a successful recovery from backup files
• D.interview employees to compare actual with expected procedures

Comment: *

Name: *

Email: *

Verification: *