Which of the following events refer to loss of integrity?
Each correct answer represents a complete solution. Choose three.

• A.Someone sees company's secret formula
• B.Someone makes unauthorized changes to a Web site
• C.An e-mail message is modified in transit
• D.A virus infects a file

Comment: *

Name: *

Email: *

Verification: *

Risks with low ratings of probability and impact are included for future monitoring in which of the following?

• A.Risk alarm
• B.Observation list
• C.Watch-list
• D.Risk register

Comment: *

Name: *

Email: *

Verification: *

Numerous media reports indicate a recently discovered technical vulnerability is being actively exploited. Which of the following would be the BEST response to this scenario?

• A.Conduct a control serf-assessment.
• B.Reassess the inherent risk of the target.
• C.Assess the vulnerability management process.
• D.Conduct a vulnerability assessment.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is true for risk management frameworks, standards and practices?
Each correct answer represents a part of the solution. Choose three.

• A.They act as a guide to focus efforts of variant teams.
• B.They result in increase in cost of training, operation and performance improvement.
• C.They provide a systematic view of "things to be considered" that could harm clients or an enterprise.
• D.They assist in achieving business objectives quickly and easily.

Correct Answer: A,C,D

Explanation/Reference:
Explanation:
Frameworks, standards and practices are necessary as:
They provide a systematic view of "things to be considered" that could harm clients or an enterprise.

They act as a guide to focus efforts of variant teams.

They save time and revenue, such as training costs, operational costs and performance improvement

costs.
They assist in achieving business objectives quickly and easily.

Comment: *

Name: *

Email: *

Verification: *

What are the PRIMARY requirements for developing risk scenarios?
Each correct answer represents a part of the solution. Choose two.

• A.Potential threats and vulnerabilities that could lead to loss events
• B.Determination of the value of an asset at risk
• C.Determination of actors that has potential to generate risk
• D.Determination of threat type

Comment: *

Name: *

Email: *

Verification: *