ARM Cyber and Data Security Risk 5

Question 1

Which California law gives consumers rights to know, delete, and opt out of the sale of their personal information?

Accepted Answer

California Consumer Privacy Act

Answer

The CCPA, as amended by the CPRA, grants California residents these privacy rights.

Question 2

Which element of a cyber incident response plan should typically come first after an attack is confirmed?

Accepted Answer

Containment to limit spread

Answer

Containment stops the damage from spreading before eradication and recovery begin.

Question 3

An organization keeps offline, immutable backups tested regularly. This control most directly mitigates which risk?

Accepted Answer

Ransomware-driven data loss

Answer

Offline, immutable backups allow restoration without paying ransom because attackers cannot encrypt them.

Question 4

Which statement about cyber risk aggregation is most accurate for insurers?

Accepted Answer

A single widespread event, like a cloud outage, can trigger many correlated claims at once

Answer

Shared technology dependencies mean one event can hit many insureds simultaneously, creating accumulation risk.

Question 5

Security awareness training for employees is best classified as which type of risk control?

Accepted Answer

Administrative loss prevention control

Answer

Training is an administrative control aimed at reducing the frequency of losses such as phishing.

ARM - Associate in Risk Management Practice Test