CSC Security Risk Management 2

Question 1

Which risk treatment option involves sharing the financial impact of a risk with a third party, such as through insurance?

Accepted Answer

Risk transference

Answer

Risk transference shifts the financial burden of a risk to another party, commonly through insurance or outsourcing contracts.

Question 2

A security consultant is performing a qualitative risk assessment. Which characteristic best describes this approach?

Accepted Answer

Relies on subjective ratings such as High, Medium, and Low

Answer

Qualitative risk assessments use descriptive scales and expert judgment rather than precise numerical monetary values.

Question 3

What does the term 'residual risk' refer to in security risk management?

Accepted Answer

The risk that remains after controls have been implemented

Answer

Residual risk is the remaining exposure after security controls have been applied to reduce the initial inherent risk.

Question 4

In a Business Impact Analysis (BIA), what is the PRIMARY purpose of identifying the Maximum Tolerable Downtime (MTD)?

Accepted Answer

To determine how long a process can be disrupted before causing unacceptable harm

Answer

MTD defines the longest period an organization can survive without a critical function before suffering irreversible damage, guiding recovery planning.

Question 5

Which formula correctly represents the calculation of Single Loss Expectancy (SLE)?

Accepted Answer

SLE = Asset Value × Exposure Factor

Answer

SLE is calculated by multiplying the asset value by the exposure factor, which represents the percentage of the asset lost in a single incident.

(CSC) Certified Security Consultant Practice Test

(CSC) Certified Security Consultant Practice Test

CSC Security Risk Management 2