Online Access Free IT-Risk-Fundamentals Practice Test

Which of the following provides the BEST input when developing specific, measurable, realistic, and time- bound (SMART) metrics?

• A.Industry best practices
• B.Associated business functions or services
• C.Enterprise risk management strategy

Which of the following is MOST likely to promote ethical and open communication of risk management activities at the executive level?

• A.Expressing risk results in financial terms
• B.Increasing the frequency of risk status reports
• C.Recommending risk tolerance levels to the business

Which of the following is the PRIMARY concern with vulnerability assessments?

• A.False positives
• B.Threat mitigation
• C.Report size

What is the PRIMARY benefit of using generic technology terms in IT risk assessment reports to management?

• A.Ease of promoting risk awareness with key stakeholders
• B.Simplicity in translating risk reports into other languages
• C.Clarity on the proper interpretation of reported risk

Which of the following is the GREATEST benefit of effective asset valuation?

• A.It ensures assets are linked to processes and classified based on business value.
• B.It assures that asset valuation is consistently applied to all assets across the enterprise.
• C.It protects the enterprise from paying more for protection than the net worth of the asset.