Which of the following is MOST important to understand when determining an appropriate risk assessment approach?

• A.Complexity of the IT infrastructure
• B.Value of information assets
• C.Management culture
• D.Threats and vulnerabilities

Comment: *

Name: *

Email: *

Verification: *

When prioritizing risk response, management should FIRST:

• A.evaluate the organization's ability and expertise to implement the solution.
• B.evaluate the risk response of similar organizations.
• C.determine which risk factors have high remediation costs.
• D.address high risk factors that have efficient and effective solutions.

Comment: *

Name: *

Email: *

Verification: *

A risk practitioner is organizing risk awareness training for senior management. Which of the following is the MOST important topic to cover in the training session?

• A.Senior management allocation of risk management resources
• B.The organizations risk appetite and tolerance
• C.Senior management roles and responsibilities
• D.The organization's strategic risk management projects

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST indicates the effectiveness of anti-malware software?

• A.Number of successful attacks by malicious software
• B.Number of downtime hours in business critical servers
• C.Number of staff hours lost due to malware attacks
• D.Number of patches made to anti-malware software

Comment: *

Name: *

Email: *

Verification: *

Which of the following processes addresses the risks by their priorities, schedules the project management plan as required, and inserts resources and activities into the budget?

• A.Monitor and Control Risk
• B.Plan risk response
• C.Identify Risks
• D.Qualitative Risk Analysis
• E.Explanation:
  The plan risk response project management process aims to reduce the threats to the project objectives and to increase opportunities. It follows the perform qualitative risk analysis process and perform quantitative risk analysis process. Plan risk response process includes the risk response owner to take the job for each agreed-to and funded risk response. This process addresses the risks by their priorities, schedules the project management plan as required, and inserts resources and activities into the budget. The inputs to the plan risk response process are as follows: Risk register Risk management plan
  Answer C
  is incorrect. Identify Risks is the process of determining which risks may affect the project. It also documents risks' characteristics. The Identify Risks process is part of the Project Risk Management knowledge area. As new risks may evolve or become known as the project progresses through its life cycle, Identify Risks is an iterative process. The process should involve the project team so that they can develop and maintain a sense of ownership and responsibility for the risks and associated risk response actions. Risk Register is the only output of this process.

Comment: *

Name: *

Email: *

Verification: *