- (Exam Topic 3)
Which of the following is the BEST way to quantify the likelihood of risk materialization?

1. A. Balanced scorecard
2. B. Threat and vulnerability assessment
3. C. Compliance assessments
4. D. Business impact analysis (BIA)

Correct Answer: D

- (Exam Topic 2)
Which of the following resources is MOST helpful when creating a manageable set of IT risk scenarios?

1. A. Results of current and past risk assessments
2. B. Organizational strategy and objectives
3. C. Lessons learned from materialized risk scenarios
4. D. Internal and external audit findings

Correct Answer: B

- (Exam Topic 3)
An organization's IT infrastructure is running end-of-life software that is not allowed without exception approval. Which of the following would provide the MOST helpful information to justify investing in updated software?

1. A. The balanced scorecard
2. B. A cost-benefit analysis
3. C. The risk management frameworkD, A roadmap of IT strategic planning

Correct Answer: B

- (Exam Topic 2)
Which of the following will be MOST effective to mitigate the risk associated with the loss of company data stored on personal devices?

1. A. An acceptable use policy for personal devices
2. B. Required user log-on before synchronizing data
3. C. Enforced authentication and data encryption
4. D. Security awareness training and testing

Correct Answer: C

- (Exam Topic 4)
Which of the following would be the GREATEST concern for an IT risk practitioner when an employees.....

1. A. The organization's structure has not been updated
2. B. Unnecessary access permissions have not been removed.
3. C. Company equipment has not been retained by IT
4. D. Job knowledge was not transferred to employees m the former department

Correct Answer: B