Question 161 · 188 in bank
Risk that remains after risk mitigation is known as_____________.
Show answer
Answer: B
EC-Council Certified Chief Information Security Officer (CCISO)188 questions across 19 pages are complete and free, with no account or card.
188 questions in this bank
Free access · progress saved on this device
Risk that remains after risk mitigation is known as_____________.
Answer: B
An organization is looking for a framework to measure the efficiency and effectiveness of their Information Security Management System. Which of the following international standards can BEST assist this organization?
Answer: C
Which of the following is the MAIN reason to follow a formal risk management process in an organization that hosts and uses privately identifiable information (PII) as part of their business models and processes?
Answer: D
Your IT auditor is reviewing significant events from the previous year and has identified some procedural oversights. Which of the following would be the MOST concerning?
Answer: C
Which of the following best represents a calculation for Annual Loss Expectancy (ALE)?
Answer: C
The Information Security Management program MUST protect:
Answer: C
When measuring the effectiveness of an Information Security Management System which one of the following would be MOST LIKELY used as a metric framework?
Answer: B
B is correct: ISO/IEC 27004 concerns measurements or measures needed for information security management: these are commonly known as 'security metrics' in the profession (if not within ISO/IEC JTC 1/SC 27!).
Source: Adapted from community discussion — boyladdudeman
An organization is required to implement background checks on all employees with access to databases containing credit card information. This is considered a security___________.
Answer: D
Answer is D. Administrative control, Administrative controls refer to the policies, procedures, and practices implemented by an organization to manage and mitigate risks. Background checks are typically considered an administrative control as they involve implementing specific measures and processes to verify the credentials and background of individuals before granting them access to sensitive information or systems.
Source: Adapted from community discussion — arifbhatkar
Risk is defined as:
Answer: B
A method to transfer risk is to______________.
Answer: D
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
712-50 practice, question 161. 188 questions available.
Version 1.0.0. How we source questions