You are the project manager of your enterprise. While performing risk management, you are given a task to identify where your enterprise stand in certain practice and also to suggest the priorities for improvements. Which of the following models would you use to accomplish this task?

• A.Capability maturity model
• B.Decision tree model
• C.Fishbone model
• D.Simulation tree model
• E.Explanation:
  Capability maturity models are the models that are used by the enterprise to rate itself in terms of the least mature level (having nonexistent or unstructured processes) to the most mature (having adopted and optimized the use of good practices). The levels within a capability maturity model are designed to allow an enterprise to identify descriptions of its current and possible future states. In general, the purpose is to: Identify, where enterprises are in relation to certain activities or practices. Suggest how to set priorities for improvements

Comment: *

Name: *

Email: *

Verification: *

There are five inputs to the quantitative risk analysis process. Which one of the following is NOT an input to quantitative risk analysis process?

• A.Risk management plan
• B.Enterprise environmental factors
• C.Cost management plan
• D.Risk register

Comment: *

Name: *

Email: *

Verification: *

Which of the following would be of GREATEST concern to a risk practitioner reviewing current key risk indicators (KRIs)?

• A.The KRIs are not automated.
• B.The KRIs' source data lacks integrity.
• C.The KRIs are not quantitative.
• D.The KRIs do not allow for trend analysis.

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of your project. You have to analyze various project risks. You have opted for quantitative analysis instead of qualitative risk analysis. What is the MOST significant drawback of using quantitative analysis over qualitative risk analysis?

• A.lower objectivity
• B.higher cost
• C.higher reliance on skilled personnel
• D.lower management buy-in
• E.Explanation:
  Quantitative risk analysis is generally more complex and thus is costlier than qualitative risk analysis.

Comment: *

Name: *

Email: *

Verification: *

A risk assessment has identified increased losses associated with an IT risk scenario. It is MOST important for the risk practitioner to:

• A.develop new risk scenarios.
• B.update the risk rating.
• C.reevaluate inherent risk.
• D.implement additional controls.

Comment: *

Name: *

Email: *

Verification: *