ACI Risk Management & Mitigation 2

Question 1

During a digital forensic investigation, an examiner discovers that the suspect's hard drive is failing. Which risk mitigation step should be taken FIRST?

Accepted Answer

Create a forensic image of the drive before it fails completely

Answer

Creating a forensic image first preserves evidence before the drive fails, protecting evidentiary integrity.

Question 2

Which framework is most commonly referenced by ACI investigators when assessing organizational cybersecurity risk posture?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

The NIST CSF provides a structured approach to identifying, protecting, detecting, responding to, and recovering from cybersecurity risks.

Question 3

A company experiences repeated phishing attacks targeting employees. Which risk mitigation strategy addresses the ROOT CAUSE most effectively?

Accepted Answer

Conduct recurring security awareness training

Answer

Security awareness training targets the human element, which is the root cause of phishing susceptibility.

Question 4

In risk management terminology, what does 'residual risk' refer to?

Accepted Answer

The risk remaining after controls and mitigations have been implemented

Answer

Residual risk is the level of risk that persists even after all planned risk mitigation controls have been applied.

Question 5

An ACI investigator recommends purchasing cyber liability insurance for a client. This is an example of which risk response strategy?

Accepted Answer

Risk transference

Answer

Purchasing insurance transfers the financial impact of a risk to a third party (the insurer).

(ACI) AccessData Certified Investigator Practice Test

(ACI) AccessData Certified Investigator Practice Test

ACI Risk Management & Mitigation 2