Which of the following would MOST effectively reduce risk associated with an increase of online transactions on a retailer website?

• A.Transaction limits
• B.A hot backup site
• C.Scalable infrastructure
• D.Website activity monitoring

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST helpful in aligning IT risk with business objectives?

• A.Performing a business impact analysis (BIA)
• B.Integrating the results of top-down risk scenario analyses
• C.Introducing an approved IT governance framework
• D.Implementing a risk classification system

Comment: *

Name: *

Email: *

Verification: *

What are the MOST important criteria to consider when developing a data classification scheme to facilitate risk assessment and the prioritization of risk mitigation activities?

• A.Mitigation and control value
• B.Recovery point objective (RPO) and recovery time objective (RTO)
• C.Volume and scope of data generated daily
• D.Business criticality and sensitivity

Comment: *

Name: *

Email: *

Verification: *

FISMA requires federal agencies to protect IT systems and data. How often should compliance be audited by an external organization?

• A.Annually
• B.Quarterly
• C.Every three years
• D.Never

Correct Answer: A

Explanation/Reference:
Explanation:
Inspection of FISMA is required to be done annually. Each year, agencies must have an independent evaluation of their program. The objective is to determine the effectiveness of the program. These evaluations include:
Testing for effectiveness: Policies, procedures, and practices are to be tested. This evaluation does not

test every policy, procedure, and practice. Instead, a representative sample is tested.
An assessment or report: This report identifies the agency's compliance as well as lists compliance with

FISMA. It also lists compliance with other standards and guidelines.
Incorrect Answers:
B, C, D: Auditing of compliance by external organization is done annually, not quarterly or every three years.

Comment: *

Name: *

Email: *

Verification: *

Which among the following is the MOST crucial part of risk management process?

• A.Risk communication
• B.Auditing
• C.Risk monitoring
• D.Risk mitigation

Comment: *

Name: *

Email: *

Verification: *