Which of the following should an organization perform to forecast the effects of a disaster?

• A.Analyze capability maturity model gaps.
• B.Develop a business impact analysis (BIA).
• C.Define recovery time objectives (RTO).
• D.Simulate a disaster recovery.

Comment: *

Name: *

Email: *

Verification: *

Which of the following risk management practices BEST facilitates the incorporation of IT risk scenarios into the enterprise-wide risk register?

• A.Key risk indicators (KRIs) are developed for key IT risk scenarios.
• B.IT risk scenarios are developed in the context of organizational objectives.
• C.IT risk scenarios are assessed by the enterprise risk management team.
• D.Risk appetites for IT risk scenarios are approved by key business stakeholders.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would provide executive management with the BEST information to make risk decisions as a result of a risk assessment?

• A.A quantitative presentation of risk assessment results
• B.A qualitative presentation of risk assessment results
• C.A comparison of risk assessment results to the desired state
• D.An assessment of organizational maturity levels and readiness

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of GFT project. Your project involves the use of electrical motor. It was stated in its specification that if its temperature would increase to 500 degree Fahrenheit the machine will overheat and have to be shut down for 48 hours. If the machine overheats even once it will delay the project's arrival date. So to prevent this you have decided while creating response that if the temperature of the machine reach 450, the machine will be paused for at least an hour so as to normalize its temperature. This temperature of 450 degrees is referred to as?

• A.Risk identification
• B.Risk trigger
• C.Risk event
• D.Risk response

Comment: *

Name: *

Email: *

Verification: *

Which of the following should be of GREATEST concern to a risk practitioner when determining the effectiveness of IT controls?

• A.Controls are selected without a formal cost-benefit
• B.Operational staff perform control self-assessments.
• C.Configuration updates do not follow formal change control.
• D.analysis-Management reviews security policies once every two years.

Comment: *

Name: *

Email: *

Verification: *