Question 1

Which of the following is an example of an inductive method to gather information?

Options :

A : Vulnerability analysis

B : Controls gap analysis

C : Penetration testing

Answer: C

Question 2

What do loss events refer to in the context of risk scenario development?

Options :

A : Events that improve enterprise complexity

B : Negative impact-generating events

C : Positive impact-generating events

D : Events that contribute to risk reduction

Answer: B

Question 3

Why is it highly desirable to have a single integrated business continuity plan?

Options :

A : To ensure that resources committed are used ineffectively

B : To ensure that there is no confidence in surviving a disruption

C : To ensure proper coordination among various plan components and effective resource utilization

D : To ensure that no plan components need coordination

Answer: C

Question 4

Which activity is commonly linked with analyzing Information and Technology (I&T) related risks?

Options :

A : Estimating the frequency and impact of I&T-related risk scenarios.

B : Identifying potential vulnerabilities within the I&T infrastructure and systems.

C : Documenting IT controls that mitigate similar risk types.

D : Cataloging I&T-related risk scenarios.

Answer: A

Question 5

What is the significance of the Risk Roles and Responsibilities Matrix (RRRM)?

Options :

A : IT governance

B : Data management

C : Describing the interaction between three lines of defense

D : Enterprise risk management

Answer: C

Free IT-Risk-Fundamentals Mock Exam – Practice Online Confidently