CAD Risk Management & Mitigation 2

Question 1

A development team discovers a critical security vulnerability in a third-party library used in production. Which risk response strategy is MOST appropriate?

Accepted Answer

Mitigate by patching or replacing the library immediately

Answer

Mitigation involves taking immediate action to reduce the probability or impact of the risk, such as patching or replacing the vulnerable library.

Question 2

Which metric is used to calculate the Annual Loss Expectancy (ALE) in quantitative risk assessment?

Accepted Answer

Single Loss Expectancy × Annualized Rate of Occurrence

Answer

ALE = SLE × ARO, where SLE is the Single Loss Expectancy and ARO is the Annualized Rate of Occurrence.

Question 3

During sprint planning, a team identifies that a new API integration has uncertain requirements. What risk mitigation technique should they apply?

Accepted Answer

Spike solution to explore feasibility before committing

Answer

A spike is a time-boxed research task used in Agile to reduce uncertainty before committing to a full implementation.

Question 4

A risk register entry shows a risk with high probability but low impact. According to a standard risk matrix, how should this risk be prioritized?

Accepted Answer

Medium — monitor and plan response

Answer

High probability combined with low impact typically places a risk in the medium priority zone, requiring monitoring and a planned response.

Question 5

What is the purpose of a fallback plan in risk management?

Accepted Answer

To execute when the primary risk response fails

Answer

A fallback plan is a contingency response activated when the primary mitigation strategy proves ineffective.

(CAD) Certified Application Developer Practice Test

(CAD) Certified Application Developer Practice Test

CAD Risk Management & Mitigation 2