What is the correct sequence for the risk management lifecycle?

Identify risk, analyze risk, treat risk, monitor risk

How is the annualized loss expectancy (ALE) calculated?

Annual rate of occurrence × single loss expectancy

What are clues to watch for to determine if an email message is legitimate or not?

Company name, Digital signature, Grammar

studbud

PRT571 Risk Assessment

11 termsStudBud Administration53 plays

Imported from external platform

Flashcards11 cardsFPractice quizPHost liveL

Questions 11

Answers

1
What serves as a centralized list of risks, impacts, mitigations, and severity ratings?
Incident response plan
Risk management framework
Disaster recovery plan
Risk register
2
What is the purpose of social engineering?
Data exfiltration
Denial of service
Deception
Promote ideology
3
What is a technical security control?
Authorization
Smart card authentication
Separation of duties
User training
4
You have decided to purchase cybersecurity insurance to cover DDoS events. Which type of risk treatment is this?
Risk avoidance
Risk acceptance
Risk mitigation
Risk transfer
5
What is the correct sequence for the risk management lifecycle?
Identify risk, treat risk, analyze risk, monitor risk
Identify risk, monitor risk, analyze risk, treat risk
Analyze risk, treat risk, monitor risk, identify risk
Identify risk, analyze risk, treat risk, monitor risk
6
How is the annualized loss expectancy (ALE) calculated?
Annual rate of occurrence × asset value
Exposure factor × single loss expectancy
Annual rate of occurrence × single loss expectancy
Exposure factor × annual rate of occurrence
7
Which employee management concepts can be used to identify fraud?
Least privilege
All the above
Job rotation
Separation of duties
8
Which type of hardware device can capture user keystrokes and remain undetected by antivirus software?
Wi-Fi router
Keylogger
USB thumb drive
Key fob
9
What is an example of OSINT?
Medical history
Financial records
LinkedIn profiles
Firewall logs
10
What are clues to watch for to determine if an email message is legitimate or not?
Company name, Email address, Grammar
Company name, Digital signature, Grammar
Email address, Digital signature, Grammar
Company name, Email address, Digital signature
11
1. Which type of threat actor promotes an ideology?
Nation state
Script kiddie
Hacktivist
Organized crime

PRT571 Risk Assessment Flashcards | StudBud