Risk Management & Mitigation Flashcards
7 cards from real ACE practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Risk Management & Mitigation flashcards as text
Which type of risk analysis relies on numeric values and statistical data to calculate potential losses?
Answer: Quantitative risk analysis
Quantitative risk analysis uses numerical data—such as asset value, threat frequency, and probability—to produce measurable loss estimates like ALE.
A forensic examiner discovers that a target organization stores critical case files on unencrypted USB drives. Which risk does this represent?
Answer: Confidentiality risk
Unencrypted storage of sensitive case files exposes confidential information to unauthorized access if the media is lost or stolen.
During risk mitigation planning, a forensic lab decides to stop using a vulnerable legacy imaging tool entirely. This is an example of:
Answer: Risk avoidance
Risk avoidance eliminates the activity or tool that introduces the risk, removing exposure entirely rather than reducing or transferring it.
An incident response team uses a risk-based prioritization model to triage multiple simultaneous cyber incidents. Which factor most directly determines priority?
Answer: The potential business impact and probability of escalation
Risk-based triage prioritizes incidents by their potential impact on business operations and the likelihood that harm will increase without immediate action.
A forensic examiner is tasked with assessing the risk of cross-contamination between cases on shared lab equipment. Which control best mitigates this?
Answer: Sanitizing examination workstations between cases using a verified wiping process
Verified sanitization of workstations between cases eliminates residual data that could contaminate subsequent examinations.
Which security principle, when applied to a forensic lab, limits examiner access to only the evidence and tools required for their assigned case?
Answer: Least privilege
The least privilege principle restricts access rights to the minimum necessary for a task, reducing the risk of unauthorized access or accidental data modification.
What does a risk heat map visually represent in a risk management context?
Answer: The distribution of risks by likelihood and impact across a matrix
A risk heat map plots risks on a two-dimensional matrix of likelihood versus impact, using color coding to highlight high-priority areas.