CCP CCP Risk Management & Assessment 3

Question 1

A threat agent is best defined as:

Accepted Answer

An entity capable of deliberately or accidentally exploiting a vulnerability

Answer

A weakness in a system that can be exploited

Answer

The quantified impact of a security breach

Answer

A technical safeguard deployed against attacks

Question 2

Which framework specifically guides U.S. federal agencies through a structured risk management process?

Accepted Answer

NIST Risk Management Framework (RMF)

Answer

ISO 31000

Answer

OCTAVE

Answer

FAIR (Factor Analysis of Information Risk)

Question 3

The term 'threat landscape' refers to:

Accepted Answer

The complete range of potential threats facing an organization

Answer

The physical geography of network infrastructure assets

Answer

A visual diagram of the network topology

Answer

The list of known malware signatures in a database

Question 4

Which process systematically identifies, documents, and prioritizes risks to organizational assets?

Accepted Answer

Risk assessment

Answer

Incident response

Answer

Vulnerability scanning

Answer

Penetration testing

Question 5

What artifact produced during risk management records identified risks along with their likelihood, impact, and treatment plans?

Accepted Answer

Risk Register

Answer

Incident Response Plan

Answer

Business Continuity Plan

Answer

System Security Plan

Question 6

Risk appetite is best described as:

Accepted Answer

The amount of risk an organization is willing to accept in pursuit of its objectives

Answer

The maximum risk that would cause organizational bankruptcy

Answer

The residual risk remaining after all controls are applied

Answer

The total number of active threat agents an organization faces