70-413 Exam Risk Assessment & Management 3

Question 1

An organization uses a risk register to track identified risks. Which of the following fields is MOST important to include for effective risk monitoring over time?

Accepted Answer

Risk owner and review date

Answer

Assigning a risk owner and a review date ensures accountability and periodic reassessment of each risk in the register.

Question 2

Which threat modeling methodology focuses on identifying Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, and Elevation of Privilege threats?

Accepted Answer

STRIDE

Answer

STRIDE is Microsoft's threat modeling framework that categorizes threats into six types for structured analysis.

Question 3

During risk assessment for a Hyper-V deployment, you determine that the likelihood of a VM escape attack is very low but the impact would be catastrophic. How should you prioritize this risk?

Accepted Answer

Prioritize it highly because catastrophic impact overrides low likelihood

Answer

Catastrophic impact risks must be prioritized regardless of low likelihood because the potential damage is severe and irreversible.

Question 4

What is the purpose of a Business Impact Analysis (BIA) in the context of risk management?

Accepted Answer

To identify critical business functions and the impact of disruptions to them

Answer

A BIA identifies critical business processes and quantifies the impact of disruptions, informing recovery priorities and risk decisions.

Question 5

A Windows Server administrator discovers an unpatched vulnerability with a CVSS score of 9.8. The affected server has no internet exposure and sits behind multiple firewall layers. Which risk factor does this layered defense address?

Accepted Answer

Threat likelihood/exploitability

Answer

Network isolation reduces the likelihood that a threat actor can exploit the vulnerability, even though its severity remains high.

70-413 Exam Practice Test

70-413 Exam Practice Test

70-413 Exam Risk Assessment & Management 3