Question 1

In the context of quantitative risk assessment, what does the ARO measure?

Options :

A : The maximum potential loss from a single occurrence of a threat or event

B : The effectiveness of security measures implemented to reduce incidents and events

C : The total number of incidents that have occurred over a specific period, such as a week, month, or year

D : The estimated frequency at which a specific threat is expected to occur within a year

Answer: D

Question 2

Which of the following information security publications provides standards for cloud service providers' security measures and can be used to complement the NIST Cybersecurity Framework outcomes for cloud migrations and adoptions?

Options :

A : FedRAMP

B : PCI-DSS

C : HIPAA

D : OWASP

Answer: A

Question 3

Which of the following terms best describes the assurance that digital systems, services, and resources are accessible and usable when needed, without disruptions or services being denied?

Options :

A : Integrity

B : Non-repudiation

C : Availability

D : Confidentiality

Answer: C

Question 4

What is the benefit of comparing an organization's current profile against its target profile?

Options :

A : To determine the return on investment for the information technology and cybersecurity department budgets

B : To fulfill the organization-s mandatory reporting requirements to regulatory agencies and legal bodies

C : To identify discrepancies between current practices and desired outcomes, guiding focused improvements

D : To evaluate the performance of the cybersecurity tools currently in use within the organization

Answer: C

Question 5

Which of the following information security publications provides guidelines for secure web application development and is aligned with outcomes listed in the NIST Cybersecurity Framework?

Options :

A : PCI-DSS

B : HIPAA

C : FedRAMP

D : OWASP

Answer: D