Which of the following methods involves the use of predictive or diagnostic analytical tool for exposing risk factors?

• A.Scenario analysis
• B.Sensitivity analysis
• C.Fault tree analysis
• D.Cause and effect analysis

Correct Answer: D

Explanation/Reference:
Explanation:
Cause-and-effect analysis involves the use of predictive or diagnostic analytical tool for exploring the root causes or factors that contribute to positive or negative effects or outcomes. These tools also help in identifying potential risk.
Incorrect Answers:
A: This analysis is not a method for exposing risk factors. It is used for analyzing scenarios.
B: Sensitivity analysis is the quantitative risk analysis technique that:
Assist in determination of risk factors that have the most potential impact

Examines the extent to which the uncertainty of each element affects the object under consideration

when all other uncertain elements are held at their baseline values
C: Fault tree analysis (FIA) is a technique that provides a systematic description of the combination of possible occurrences in a system, which can result in an undesirable outcome. It combines hardware failures and human failures.

Comment: *

Name: *

Email: *

Verification: *

You are the program manager for your organization and you are working with Alice, a project manager in her program. Alice calls you and insists you to add a change to program scope. You agree for that the change.
What must Alice do to move forward with her change request?

• A.Add the change to the program scope herself, as she is a project manager
• B.Create a change request charter justifying the change request
• C.Document the change request in a change request form.
• D.Add the change request to the scope and complete integrated change control

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST indicates the effectiveness of anti-malware software?

• A.Number of staff hours lost due to malware attacks.
• B.Number of patches made to anti-malware software.
• C.Number of successful attacks by malicious software.
• D.Number of downtime hours in business critical servers.

Comment: *

Name: *

Email: *

Verification: *

When reviewing a business continuity plan (BCP). which of the following would be the MOST significant deficiency?

• A.Each business location has separate, inconsistent BCPs.
• B.Recovery time objectives (RTOs) do not meet business requirements.
• C.BCP is often tested using the walk-through method.
• D.BCP testing is net in conjunction with the disaster recovery plan (DRP)

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the first MOST step in the risk assessment process?

• A.Identification of assets
• B.Identification of threats
• C.Identification of threat sources
• D.Identification of vulnerabilities

Comment: *

Name: *

Email: *

Verification: *