ATP Risk Assessment & Management 2 — Questions and Answers
Question 1: Which risk mitigation strategy involves transferring potential financial loss to a third party, such as an insurance provider?
- Risk avoidance
- Risk transfer (Correct answer)
- Risk acceptance
- Risk reduction
Correct answer: Risk transfer
Risk transfer shifts the financial burden of a potential loss to another party, commonly through insurance or contractual agreements.
Question 2: A testing organization identifies that a newly implemented online proctoring system could expose examinee data. This discovery during planning is best described as:
- Residual risk
- Inherent risk
- Emerging risk (Correct answer)
- Controlled risk
Correct answer: Emerging risk
Emerging risk refers to newly identified threats that arise from changes in technology, environment, or operations.
Question 3: In a risk heat map, a risk plotted in the upper-right quadrant indicates:
- Low likelihood and low impact
- High likelihood and low impact
- Low likelihood and high impact
- High likelihood and high impact (Correct answer)
Correct answer: High likelihood and high impact
The upper-right quadrant of a risk heat map represents risks with both high likelihood and high impact, requiring immediate attention.
Question 4: What is the primary purpose of a Business Impact Analysis (BIA) in test program risk management?
- To identify all possible threats to a test
- To determine the consequences of disruptions to critical testing functions (Correct answer)
- To assign probability scores to each identified risk
- To document the history of past security incidents
Correct answer: To determine the consequences of disruptions to critical testing functions
A BIA evaluates how disruptions to key testing operations would impact the organization's ability to deliver assessments.
Question 5: An exam program experiences repeated item overexposure in a small candidate pool. The BEST risk control is:
- Increase the passing score
- Implement item rotation with a larger item bank (Correct answer)
- Discontinue testing in that candidate pool
- Switch from paper to computer-based testing
Correct answer: Implement item rotation with a larger item bank
Item rotation using a larger bank reduces the probability that any single item is seen by too many candidates, protecting test validity.
Question 6: Which document formally records identified risks, their likelihood, impact, owner, and mitigation plan?
- Test blueprint
- Risk register (Correct answer)
- Incident response plan
- Validity evidence report
Correct answer: Risk register
A risk register is the central repository that tracks all identified risks and their associated management details.
Question 7: A certification body decides to continue offering a test despite knowing that its content may be partially outdated. This decision represents:
- Risk transfer
- Risk avoidance
- Risk acceptance (Correct answer)
- Risk elimination
Correct answer: Risk acceptance
Risk acceptance means the organization knowingly tolerates a risk, typically because mitigation costs outweigh potential harm.
ATP Risk Assessment & Management 2
Which risk mitigation strategy involves transferring potential financial loss to a third party, such as an insurance provider?