CIM Risk Assessment & Mitigation 5

Question 1

A healthcare organization identifies that ransomware attacks on similar hospitals have increased 40% year-over-year. This information is BEST classified as:

Accepted Answer

Threat intelligence used to update risk likelihood scores

Answer

Industry-wide attack trend data is threat intelligence that should feed back into the organization's risk likelihood assessments.

Question 2

The concept of 'defense in depth' in risk mitigation refers to:

Accepted Answer

Layering multiple independent controls so that failure of one does not result in full exposure

Answer

Defense in depth uses redundant, layered controls so an attacker must defeat multiple barriers, reducing the probability of a successful breach.

Question 3

An organization's risk appetite statement says 'we will not accept any risk with an impact score above 4 on our 5-point scale.' A new project introduces a risk scored 4/5 impact × 2/5 likelihood. The CORRECT action is:

Accepted Answer

Escalate for executive decision since impact exceeds the stated appetite threshold

Answer

The impact of 4/5 exceeds the stated appetite ceiling; regardless of likelihood, this must be escalated per policy before proceeding.

Question 4

Which of the following is an example of a PROACTIVE risk mitigation action?

Accepted Answer

Patching a known vulnerability before it is exploited

Answer

Patching before exploitation prevents the risk from materializing, making it a proactive (preventive) mitigation.

Question 5

In the NIST Risk Management Framework (RMF), what is the purpose of the 'Categorize' step?

Accepted Answer

To classify information systems according to the potential impact of a security breach

Answer

The Categorize step in NIST RMF determines the system's security impact level (Low/Moderate/High) based on confidentiality, integrity, and availability impacts.

(CIM) Certified Incident Manager Practice Test

(CIM) Certified Incident Manager Practice Test

CIM Risk Assessment & Mitigation 5