CRP Risk Assessment & Business Impact Analysis 3

Question 1

Which qualitative risk analysis technique uses a predefined scale (e.g., Low/Medium/High) to rate both likelihood and impact?

Accepted Answer

Risk matrix (heat map)

Answer

A risk matrix plots likelihood against impact using categorical scales to produce a visual risk heat map.

Question 2

What distinguishes a 'threat' from a 'vulnerability' in the context of risk assessment?

Accepted Answer

A threat is the potential cause of harm; a vulnerability is a weakness that can be exploited

Answer

Threats are potential harmful events or actors, while vulnerabilities are weaknesses in assets or controls that threats can exploit.

Question 3

During a BIA, which of the following is considered a non-financial impact category?

Accepted Answer

Reputational damage and customer confidence erosion

Answer

Reputational damage is a non-financial (intangible) impact that must be captured alongside quantifiable financial losses.

Question 4

Which risk assessment method uses expert elicitation and Delphi techniques to reach consensus on risk ratings?

Accepted Answer

Qualitative risk analysis

Answer

Qualitative risk analysis relies on expert judgment and structured techniques like Delphi to assign categorical ratings when hard data is unavailable.

Question 5

An organization's critical process has an RPO of 4 hours. Which backup strategy BEST meets this requirement?

Accepted Answer

Continuous data replication with near-real-time synchronization

Answer

Continuous replication minimizes data loss to seconds or minutes, easily satisfying a 4-hour RPO.

(CRP) Certified Resilience Professional Practice Test

(CRP) Certified Resilience Professional Practice Test

CRP Risk Assessment & Business Impact Analysis 3