CRA Risk Identification & Assessment 4

Question 1

When performing a Monte Carlo simulation for risk assessment, what does the output typically represent?

Accepted Answer

A probability distribution of possible outcomes across thousands of simulated scenarios

Answer

Monte Carlo simulation runs thousands of iterations with variable inputs to produce a probability distribution showing the range and likelihood of possible outcomes.

Question 2

A risk architect identifies that a new regulation requires data localization, preventing cross-border data transfers. This is best classified as which type of risk?

Accepted Answer

Compliance/regulatory risk

Answer

Data localization laws represent compliance and regulatory risk, as violations can result in fines, operational restrictions, or legal penalties.

Question 3

In the FAIR (Factor Analysis of Information Risk) model, what are the two primary components used to calculate risk magnitude?

Accepted Answer

Loss Event Frequency and Loss Magnitude

Answer

The FAIR model calculates risk as the combination of Loss Event Frequency (how often) and Loss Magnitude (how much), producing a quantitative risk value.

Question 4

Which of the following represents a 'secondary risk' in risk management?

Accepted Answer

A risk that arises as a direct result of implementing a risk response

Answer

Secondary risks are new risks that emerge as unintended consequences of implementing a risk response or mitigation action.

Question 5

An organization identifies that multiple independently unlikely events, if they occurred simultaneously, would create a catastrophic outcome. Which risk assessment concept describes this scenario?

Accepted Answer

Compound risk or risk confluence

Answer

Compound or confluent risk describes scenarios where the simultaneous occurrence of individually unlikely events combines to produce catastrophic outcomes.

(CRA) Certified Risk Architect Practice Test

(CRA) Certified Risk Architect Practice Test

CRA Risk Identification & Assessment 4