CCP CCP Risk Management & Assessment

Question 1

What is the standard formula for calculating risk in cybersecurity?

Accepted Answer

Threat × Vulnerability × Asset Value

Answer

Risk is commonly expressed as the product of threat likelihood, vulnerability severity, and asset value.

Question 2

Which risk treatment option involves shifting financial impact to a third party such as an insurer?

Accepted Answer

Risk transference

Answer

Risk transference moves the financial consequences of a risk event to another party, such as through cyber insurance.

Question 3

What is residual risk?

Accepted Answer

Risk remaining after security controls have been applied

Answer

Residual risk is the level of risk that persists after all security controls have been implemented.

Question 4

A qualitative risk assessment is best characterized by the use of:

Accepted Answer

Descriptive ratings such as High, Medium, and Low

Answer

Qualitative risk assessments use descriptive categories rather than precise numerical or financial values.

Question 5

What does Single Loss Expectancy (SLE) represent?

Accepted Answer

The expected monetary loss from one occurrence of a specific risk event

Answer

SLE is the estimated dollar loss associated with a single occurrence of a given risk event.

(CCP) Certified Cybersecurity Professional Practice Test