CAD Risk Management & Mitigation 4

Question 1

A development team is using threat modeling during the design phase. Which framework is commonly used to categorize software threats?

Accepted Answer

STRIDE

Answer

STRIDE (Spoofing, Tampering, Repudiation, Information Disclosure, Denial of Service, Elevation of Privilege) is Microsoft's threat modeling framework for categorizing software threats.

Question 2

Which of the following is an example of a secondary risk?

Accepted Answer

A risk that arises as a direct result of implementing a risk response

Answer

Secondary risks are new risks that are created as a direct consequence of implementing a risk response or mitigation strategy.

Question 3

A CAD candidate must prioritize risks before mitigation. Which tool ranks risks by multiplying their probability and impact scores?

Accepted Answer

Probability-Impact Matrix

Answer

The Probability-Impact Matrix ranks risks by combining their likelihood and consequence scores, creating a visual prioritization grid.

Question 4

During a risk review meeting, a previously identified risk is found to be no longer relevant to the project. What is the correct action?

Accepted Answer

Close the risk and update the risk register accordingly

Answer

When a risk is no longer applicable, it should be formally closed and the risk register updated to reflect its resolved status.

Question 5

A software release is blocked by an unresolved risk that has materialized. This materialized risk is now classified as what?

Accepted Answer

An issue

Answer

When a risk actually occurs and becomes a real problem affecting the project, it transitions from a risk to an issue requiring immediate resolution.

(CAD) Certified Application Developer Practice Test

(CAD) Certified Application Developer Practice Test

CAD Risk Management & Mitigation 4