Malware has recently affected an organization, The MOST effective way to resolve this situation and define a comprehensive risk treatment plan would be to perform:

• A.a vulnerability assessment.
• B.a root cause analysis.
• C.a gap analysis
• D.an impact assessment.

Comment: *

Name: *

Email: *

Verification: *

The PRIMARY objective of testing the effectiveness of a new control before implementation is to:

• A.comply with the organization's policy.
• B.ensure that risk is mitigated by the control.
• C.confirm control alignment with business objectives.
• D.measure efficiency of the control process.

Comment: *

Name: *

Email: *

Verification: *

An organization has procured a managed hosting service and just discovered the location is likely to be flooded every 20 years. Of the following, who should be notified of this new information FIRST?

• A.The risk owner who also owns the business service enabled by this infrastructure
• B.The site manager who is required to provide annual risk assessments under the contract
• C.The data center manager who is also employed under the managed hosting services contract
• D.The chief information officer (CIO) who is responsible for the hosted services

Comment: *

Name: *

Email: *

Verification: *

Which of the following roles would be MOST helpful in providing a high-level view of risk related to customer data loss?

• A.Data privacy officer
• B.Audit committee
• C.Customer database manager
• D.Customer data custodian

Comment: *

Name: *

Email: *

Verification: *

John works as a project manager for BlueWell Inc. He is determining which risks can affect the project. Which of the following inputs of the identify risks process is useful in identifying risks associated to the time allowances for the activities or projects as a whole, with a width of the range indicating the degrees of risk?

• A.Activity duration estimates
• B.Activity cost estimates
• C.Risk management plan
• D.Schedule management plan

Comment: *

Name: *

Email: *

Verification: *