Which of the following components of risk scenarios has the potential to generate internal or external threat on an enterprise?

• A.Timing dimension
• B.Events
• C.Assets
• D.Actors

Correct Answer: D

Explanation/Reference:
Explanation:
Components of risk scenario that are needed for its analysis are:
Actor: Actors are those components of risk scenario that has the potential to generate the threat that

can be internal or external, human or non-human. Internal actors are within the enterprise like staff, contractors, etc. On the other hand, external actors include outsiders, competitors, regulators and the market.
Threat type: Threat type defines the nature of threat, that is, whether the threat is malicious, accidental,

natural or intentional.
Event: Event is an essential part of a scenario; a scenario always has to contain an event. Event

describes the happenings like whether it is a disclosure of confidential information, or interruption of a system or project, or modification, theft, destruction, etc.
Asset: Assets are the economic resources owned by business or company. Anything tangible or

intangible that one possesses, usually considered as applicable to the payment of one's debts, is considered an asset. An asset can also be defined as a resource, process, product, computing infrastructure, and so forth that an organization has determined must be protected. Tangible asset:
Tangible are those asset that has physical attributes and can be detected with the senses, e.g., people, infrastructure, and finances. Intangible asset: Intangible are those asset that has no physical attributes and cannot be detected with the senses, e.g., information, reputation and customer trust.
Timing dimension: The timing dimension is the application of the scenario to detect time to respond to

or recover from an event. It identifies if the event occur at a critical moment and its duration. It also specifies the time lag between the event and the consequence, that is, if there an immediate consequence (e.g., network failure, immediate downtime) or a delayed consequence (e.g., wrong IT architecture with accumulated high costs over a long period of time).

Comment: *

Name: *

Email: *

Verification: *

Which one of the following is the only output for the qualitative risk analysis process?

• A.Project management plan
• B.Risk register updates
• C.Organizational process assets
• D.Enterprise environmental factors

Comment: *

Name: *

Email: *

Verification: *

The BEST key performance indicator (KPI) to measure the effectiveness of a backup process would be the number of:

• A.resources to monitor backups backup
• B.recurring restore failures.
• C.recovery requests
• D.restoration monitoring reports.

Comment: *

Name: *

Email: *

Verification: *

A trusted third party service provider has determined that the risk of a client's systems being hacked is low.
Which of the following would be the client's BEST course of action?

• A.Perform their own risk assessment
• B.Accept the risk based on the third party's risk assessment
• C.Perform an independent audit of the third party.
• D.Implement additional controls to address the risk.

Comment: *

Name: *

Email: *

Verification: *

You are the project manager of GHT project. Your project utilizes a machine for production of goods. This machine has the specification that if its temperature would rise above 450 degree Fahrenheit then it may result in burning of windings. So, there is an alarm which blows when machine's temperature reaches 430 degree Fahrenheit and the machine is shut off for 1 hour. What role does alarm contribute here?

• A.Of risk indicator
• B.Of risk identification
• C.Of risk trigger
• D.Of risk response

Comment: *

Name: *

Email: *

Verification: *