ARM Cyber and Data Security Risk 2

Question 1

A manufacturer's operations halt for six days after ransomware encrypts its production servers, though no customer data is stolen. Which first-party cyber insurance coverage most directly responds to the lost profits?

Accepted Answer

Business interruption

Answer

Cyber business interruption coverage pays lost income and extra expense caused by a network outage.

Question 2

Under the NIST Cybersecurity Framework, which function covers developing and implementing activities to take action once a cybersecurity incident is detected?

Accepted Answer

Respond

Answer

The Respond function covers containment, analysis, mitigation, and communication about a detected incident.

Question 3

An organization buys a cyber policy so that a carrier pays notification and forensic costs after a breach. Which risk treatment technique is this?

Accepted Answer

Risk transfer

Answer

Insurance shifts the financial consequences of a loss to another party, which is risk transfer.

Question 4

An employee receives an email that appears to come from the CFO urgently requesting a wire transfer to a new vendor account. What is this attack most commonly called?

Accepted Answer

Business email compromise

Answer

Business email compromise impersonates executives or vendors to trick employees into sending funds.

Question 5

Which control is primarily detective rather than preventive?

Accepted Answer

Intrusion detection system alerts

Answer

An IDS identifies suspicious activity after it occurs rather than stopping it beforehand.

ARM - Associate in Risk Management Practice Test

ARM - Associate in Risk Management Practice Test

ARM Cyber and Data Security Risk 2