CCP CCP Risk Management & Assessment 3

Question 1

A threat agent is best defined as:

Accepted Answer

An entity capable of deliberately or accidentally exploiting a vulnerability

Answer

A threat agent is the individual, group, or environmental force that has the potential to exploit a vulnerability.

Question 2

Which framework specifically guides U.S. federal agencies through a structured risk management process?

Accepted Answer

NIST Risk Management Framework (RMF)

Answer

The NIST RMF is mandatory for U.S. federal agencies and provides a structured process for managing information security risk.

Question 3

The term 'threat landscape' refers to:

Accepted Answer

The complete range of potential threats facing an organization

Answer

The threat landscape encompasses all known and emerging threats that an organization may face at a given point in time.

Question 4

Which process systematically identifies, documents, and prioritizes risks to organizational assets?

Accepted Answer

Risk assessment

Answer

Risk assessment is the structured process of identifying threats and vulnerabilities, then evaluating their likelihood and impact to prioritize treatment.

Question 5

What artifact produced during risk management records identified risks along with their likelihood, impact, and treatment plans?

Accepted Answer

Risk Register

Answer

A risk register is a living document that logs all identified risks, their ratings, and the actions planned or taken to address them.

(CCP) Certified Cybersecurity Professional Practice Test

(CCP) Certified Cybersecurity Professional Practice Test

CCP CCP Risk Management & Assessment 3