ATP Risk Assessment & Management 3

Question 1

Which of the following BEST describes residual risk?

Accepted Answer

Risk remaining after mitigation measures have been applied

Answer

Residual risk is the level of risk that persists even after controls and mitigation strategies have been implemented.

Question 2

A testing vendor's server outage causes a one-day interruption of online exam delivery. The FIRST step in risk response is:

Accepted Answer

Activate the incident response plan

Answer

Activating the incident response plan ensures a coordinated, pre-planned reaction that limits damage and guides recovery.

Question 3

Test security risk is MOST reduced when:

Accepted Answer

Multiple layers of security controls are implemented

Answer

Defense-in-depth — using layered, overlapping security controls — is the most effective strategy for reducing test security risk.

Question 4

When conducting a threat assessment for a high-stakes credentialing exam, which group should be included as a potential internal threat source?

Accepted Answer

Test center staff and item writers

Answer

Internal stakeholders such as test center staff and item writers have privileged access and represent an often-overlooked insider threat.

Question 5

Which risk quantification approach assigns numerical probabilities and financial values to estimate expected loss?

Accepted Answer

Quantitative risk analysis

Answer

Quantitative risk analysis uses numerical data to calculate the probability and financial magnitude of potential losses.

ATP - Association of Test Publishers Practice Test