When developing risk scenario using a list of generic scenarios based on industry best practices, it is MOST imported to:

• A.Identify common threats causing generic risk scenarios
• B.Validate the generic risk scenarios for relevance.
• C.Select the maximum possible risk scenarios from the list.
• D.Assess generic risk scenarios with business users.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST concern associated with business end users developing their own applications on end user spreadsheets and database programs?

• A.There is a lack of technology recovery options.
• B.Controls are not applied to the applications.
• C.The applications are not captured in the risk profile.
• D.An IT project manager is not assigned to oversee development.

Comment: *

Name: *

Email: *

Verification: *

Stephen is the project manager of the GBB project. He has worked with two subject matter experts and his project team to complete the risk assessment technique. There are approximately 47 risks that have a low probability and a low impact on the project. Which of the following answers best describes what Stephen should do with these risk events?

• A.Because they are low probability and low impact, Stephen should accept the risks.
• B.The low probability and low impact risks should be added to a watchlist for future monitoring.
• C.Because they are low probability and low impact, the risks can be dismissed.
• D.The low probability and low impact risks should be added to the risk register.
• E.Explanation:
  The low probability and low impact risks should be added to a watchlist for future monitoring.
• F.is incorrect. The risk response for these events may be to accept them, but the best
  answer is to first add them to a watchlist.
• G.is incorrect. Risks are not dismissed; they are at least added to a watchlist for
  monitoring.

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST indicates the condition of a risk management program?

• A.Number of controls.
• B.Amount of residual risk.
• C.Number of risk register entries.
• D.Level of financial support.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would BEST help minimize the risk associated with social engineering threats?

• A.Reviewing the organization's risk appetite
• B.Enforcing employee sanctions
• C.Enforcing segregation of duties
• D.Conducting phishing exercises

Comment: *

Name: *

Email: *

Verification: *