The PRIMARY benefit of maintaining an up-to-date risk register is that it helps to:

• A.ensure business unit risk is uniformly distributed.
• B.build a risk profile for management review.
• C.quantify the organization's risk appetite.
• D.implement uniform controls for common risk scenarios.

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the GREATEST benefit of analyzing logs collected from different systems?

• A.Developing threats are detected earlier.
• B.Forensic investigations are facilitated.
• C.Security violations can be identified.
• D.A record of incidents is maintained.

Comment: *

Name: *

Email: *

Verification: *

Which of the following would present the GREATEST challenge when assigning accountability for control ownership?

• A.Weak governance structures
• B.Senior management scrutiny
• C.Complex regulatory environment
• D.Unclear reporting relationships

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the BEST way to validate the results of a vulnerability assessment?

• A.Perform a root cause analysis.
• B.Perform a penetration test.
• C.Review security logs.
• D.Conduct a threat analysis.

Comment: *

Name: *

Email: *

Verification: *

When does the Identify Risks process take place in a project?

• A.At the Planning stage.
• B.At the Executing stage.
• C.At the Initiating stage.
• D.Throughout the project life-cycle.
• E.Explanation:
  Identify Risks is the process of determining which risks may affect the project. It also documents risks' characteristics. The Identify Risks process is part of the Project Risk Management knowledge area. As new risks may evolve or become known as the project progresses through its life cycle, Identify Risks is an iterative process. The process should involve the project team so
  that they can develop and maintain a sense of ownership and responsibility for the risks and
  associated risk response actions. Risk Register is the only output of this process.

Comment: *

Name: *

Email: *

Verification: *