70-413 Exam Risk Assessment & Management 4

Question 1

You are calculating Annual Loss Expectancy (ALE) for a server asset worth $200,000. The Exposure Factor is 50% and the Annualized Rate of Occurrence is 0.1. What is the ALE?

Accepted Answer

$10,000

Answer

ALE = SLE × ARO = ($200,000 × 0.5) × 0.1 = $100,000 × 0.1 = $10,000.

Question 2

Which risk management framework is specifically designed for IT systems and is published by NIST, making it widely used in US federal environments?

Accepted Answer

NIST SP 800-30

Answer

NIST SP 800-30 provides guidelines for conducting risk assessments of federal information systems and organizations.

Question 3

An attacker gains access to a server through a known vulnerability that was already patched in a tested update. The patch was not deployed because the change management window hadn't opened. What risk category does this represent?

Accepted Answer

Operational/process risk

Answer

Failure to deploy a known patch due to a process delay is an operational risk, not a technical one — the fix existed but processes prevented its application.

Question 4

During a risk assessment workshop, stakeholders disagree about the probability of a particular threat. Which qualitative technique helps build consensus by iterating anonymous expert opinions until convergence?

Accepted Answer

Delphi technique

Answer

The Delphi technique uses anonymous iterative rounds of expert input to reach consensus while avoiding groupthink.

Question 5

A risk assessment identifies that an unauthorized admin could disable Windows Firewall on critical servers. Implementing a Group Policy that prevents firewall modification is an example of which control type?

Accepted Answer

Preventive control

Answer

A Group Policy that prevents disabling the firewall proactively blocks the action from occurring, making it a preventive control.

70-413 Exam Practice Test

70-413 Exam Practice Test

70-413 Exam Risk Assessment & Management 4