Question 1

What is the focus of penetration tests?

Options :

A : Implementing new controls

B : Validating vulnerability assessments

C : Conducting risk reporting

D : Adjusting existing controls

Answer: B

Question 2

Potential losses resulting from employee errors and system failures are examples of:

Options :

A : operational risk.

B : market risk.

C : strategic risk.

Answer: A

Question 3

What is the primary focus of the top-down approach to developing risk scenarios?

Options :

A : Defining concrete, customized scenarios based on enterprise context

B : Understanding business goals and impact criteria

C : Hypothetical situations envisioned by the people performing job functions

D : Compiling a list of threats or generic loss scenarios

Answer: B

Question 4

Which activity is commonly linked with analyzing Information and Technology (I&T) related risks?

Options :

A : Estimating the frequency and impact of I&T-related risk scenarios.

B : Identifying potential vulnerabilities within the I&T infrastructure and systems.

C : Documenting IT controls that mitigate similar risk types.

D : Cataloging I&T-related risk scenarios.

Answer: A

Question 5

Which of the following is MOST important when defining an organization's risk scope?

Options :

A : Understanding the impacts of the risk environment to the organization

B : Developing a top-down approach to risk management

C : Developing requirements for risk reporting to executive management

Answer: A

Free IT-Risk-Fundamentals Mock Exam – Practice Online Confidently