IT-Risk-Fundamentals Practice Exam Questions and Answers

Which of the following is a potential risk associated with IT hardware or devices?

Which of the following risk analysis methods gathers different types of potential risk ideas to be validated and ranked by an individual or small groups during interviews?

Which of the following is the BEST way to minimize potential attack vectors on the enterprise network?

A risk practitioner has been tasked with analyzing new risk events added to the risk register. Which of the following analysis methods would BEST enable the risk practitioner to minimize ambiguity and subjectivity?

When analyzing l&T-related risk, an enterprise defines likelihood and impact on a scale from 1 to 5, and the scale of impact also defines a range expressed in monetary terms. Which of the following risk analysis approaches has been adopted?

Which of the following is the MAIN objective of governance?

When determining the criticality of I&T assets, it is MOST important to identify:

Which of the following is MOST likely to promote ethical and open communication of risk management activities at the executive level?

When evaluating the current state of controls, which of the following will provide the MOST comprehensive analysis of enterprise processes, incidents, logs, and the threat environment?

Which of the following is the PRIMARY objective of vulnerability assessments?