CDASA Threat Assessment and Risk Management 3

Question 1

When conducting a threat assessment for a military installation, which element is NOT typically part of the threat definition?

Accepted Answer

Installation's budget cycle

Answer

Adversary capabilities

Answer

Adversary intentions

Answer

Adversary past activities

Question 2

The 'likelihood' component of risk is most accurately defined as:

Accepted Answer

The probability that a threat will exploit a vulnerability

Answer

The severity of damage if a threat succeeds

Answer

The cost of implementing countermeasures

Answer

The number of adversaries capable of conducting an attack

Question 3

Which method involves systematically identifying what could go wrong and the consequences of each failure in a system or plan?

Accepted Answer

Failure Mode and Effects Analysis (FMEA)

Answer

SWOT Analysis

Answer

PESTLE Analysis

Answer

Critical Node Analysis

Question 4

A nation-state actor is assessed as having advanced cyber capabilities but no current intent to attack U.S. infrastructure. This is best characterized as:

Accepted Answer

A latent threat

Answer

An active threat

Answer

A residual threat

Answer

An accepted risk

Question 5

In risk management, 'risk transfer' is best exemplified by:

Accepted Answer

Purchasing cyber insurance to shift financial liability

Answer

Installing additional firewalls to reduce cyber exposure

Answer

Accepting the risk and continuing operations unchanged

Answer

Eliminating the vulnerable system entirely

Question 6

What analytical technique compares the cost of implementing a security countermeasure against the expected loss it prevents?

Accepted Answer

Cost-benefit analysis (CBA)

Answer

Risk appetite analysis

Answer

Threat matrix scoring

Answer

Vulnerability prioritization

Question 7

Which threat category encompasses non-state actors motivated primarily by ideological or political goals rather than financial gain?

Accepted Answer

Hacktivists

Answer

Cybercriminals

Answer

Insider threats

Answer

Corporate espionage actors