Question 1

What category of control is represented by employing a firewall to obstruct traffic on ports linked to malicious tools?

Options :

A : Detective

B : Preventive

C : Compensating

D : Corrective

Answer: B

Question 2

What is the significance of the Risk Roles and Responsibilities Matrix (RRRM)?

Options :

A : IT governance

B : Data management

C : Describing the interaction between three lines of defense

D : Enterprise risk management

Answer: C

Question 3

Which of the following presents the GREATEST risk for the continued existence of an enterprise?

Options :

A : When its risk appetite and tolerance are reviewed annually

B : When its actual risk eventually exceeds organizational risk appetite

C : When its risk appetite and actual risk exceed its risk capacity

Answer: C

Question 4

Which of the following is MOST important when defining an organization's risk scope?

Options :

A : Understanding the impacts of the risk environment to the organization

B : Developing a top-down approach to risk management

C : Developing requirements for risk reporting to executive management

Answer: A

Question 5

What is the primary focus of I&T risk scenarios?

Options :

A : To describe potential IT-related events and their business impacts

B : To conduct interviews with potential pitfalls

C : To analyze financial assets and their potential risks

D : To identify potential threats and vulnerabilities

Answer: A

Free IT-Risk-Fundamentals Mock Exam – Practice Online Confidently