CSET Risk Assessment & Management 5

Question 1

A school principal implements a new sign-in procedure to reduce unauthorized access to campus. This is an example of which type of risk control?

Accepted Answer

Preventive control

Answer

Preventive controls are implemented before an incident to reduce the likelihood or impact of a risk event occurring.

Question 2

In business continuity planning, what is the 'Recovery Time Objective' (RTO)?

Accepted Answer

The maximum acceptable time to restore a system after disruption

Answer

RTO defines the target time within which a business process or system must be restored after a disruption to avoid unacceptable consequences.

Question 3

Which of the following best describes a 'risk appetite' in organizational risk management?

Accepted Answer

The amount and type of risk an organization is willing to accept in pursuit of its objectives

Answer

Risk appetite is the level and type of risk an organization intentionally accepts while pursuing its strategic goals.

Question 4

A risk assessment reveals that installing a new server room poses a fire risk. Installing a fire suppression system is an example of which risk response?

Accepted Answer

Risk mitigation

Answer

Risk mitigation reduces the probability or impact of a risk event by implementing controls, such as fire suppression systems.

Question 5

During risk monitoring, a project team tracks 'risk triggers.' What are risk triggers?

Accepted Answer

Warning signs or conditions that indicate a risk is about to occur

Answer

Risk triggers are observable indicators or conditions that signal a risk event is imminent or has started to materialize.

CSET Test Practice Test

CSET Test Practice Test

CSET Risk Assessment & Management 5