Question 1

What should be documented in a comprehensive risk assessment report?

Options :

A : Internal factors only

B : Risk response information only

C : Assumptions and unknown factors

D : External factors only

Answer: C

Question 2

What determines the suitability of risk analysis approaches?

Options :

A : Culture, resources, skills, environment, and risk appetite

B : Potential consequences of a given risk scenario

C : Criticality and sensitivity of IT assets

D : Frequency and magnitude of a given risk scenario

Answer: A

Question 3

What is the primary focus of the top-down approach to developing risk scenarios?

Options :

A : Defining concrete, customized scenarios based on enterprise context

B : Understanding business goals and impact criteria

C : Hypothetical situations envisioned by the people performing job functions

D : Compiling a list of threats or generic loss scenarios

Answer: B

Question 4

What is the primary focus of I&T risk scenarios?

Options :

A : To describe potential IT-related events and their business impacts

B : To conduct interviews with potential pitfalls

C : To analyze financial assets and their potential risks

D : To identify potential threats and vulnerabilities

Answer: A

Question 5

Which statement accurately describes threat actors?

Options :

A : Threat actors encompass a variety of potential sources beyond just humans.

B : Every threat is associated with a threat actor.

C : Threat actors are limited to humans.

D : Threat actors encompass competitors as well.

Answer: A