An application owner has specified the acceptable downtime in the event of an incident to be much lower than the actual time required for the response team to recover the application. Which of the following should be the NEXT course of action?

• A.Prepare a cost-benefit analysis of alternatives available
• B.Invoke the disaster recovery plan during an incident.
• C.Reduce the recovery time by strengthening the response team.
• D.Implement redundant infrastructure for the application.

Comment: *

Name: *

Email: *

Verification: *

The MAJOR reason to classify information assets is

• A.establish recovery time objectives (RTOs)
• B.determine their sensitivity and critical
• C.maintain a current inventory and catalog of information assets
• D.categorize data into groups

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of your enterprise. While performing risk management, you are given a task to identify where your enterprise stands in certain practice and also to suggest the priorities for improvements. Which of the following models would you use to accomplish this task?

• A.Capability maturity model
• B.Decision tree model
• C.Fishbone model
• D.Simulation tree model

Correct Answer: A

Explanation/Reference:
Explanation:
Capability maturity models are the models that are used by the enterprise to rate itself in terms of the least mature level (having nonexistent or unstructured processes) to the most mature (having adopted and optimized the use of good practices).
The levels within a capability maturity model are designed to allow an enterprise to identify descriptions of its current and possible future states. In general, the purpose is to:
Identify, where enterprises are in relation to certain activities or practices.

Suggest how to set priorities for improvements

Incorrect Answers:
D: There is no such model exists in risk management process.
B: Decision tree analysis is a risk analysis tool that can help the project manager in determining the best risk response. The tool can be used to measure probability, impact, and risk exposure and how the selected risk response can affect the probability and/or impact of the selected risk event. It helps to form a balanced image of the risks and opportunities connected with each possible course of action. This makes them mostly useful for choosing between different strategies, projects, or investment opportunities particularly when the resources are limited. A decision tree is a decision support tool that uses a tree-like graph or model of decisions and their possible consequences, including chance event outcomes, resource costs, and utility.
C: Fishbone diagrams or Ishikawa diagrams shows the relationships between the causes and effects of problems.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the MOST appropriate key risk indicator (KRI) for backup media that is recycled monthly?

• A.Successful completion of backup operations
• B.Percentage of failed restore tests
• C.Time required for backup restoration testing
• D.Change in size of data backed up

Comment: *

Name: *

Email: *

Verification: *

You are the program manager for your organization and you are working with Alice, a project manager in her program. Alice calls you and insists you to add a change to program scope. You agree for that the change. What must Alice do to move forward with her change request?

• A.Add the change to the program scope herself, as she is a project manager
• B.Create a change request charter justifying the change request
• C.Document the change request in a change request form.
• D.Add the change request to the scope and complete integrated change control

Comment: *

Name: *

Email: *

Verification: *