CSI Threat Identification & Risk Management 3

Question 1

During a vulnerability assessment, a security investigator discovers an unlocked server room. This finding represents:

Accepted Answer

A vulnerability

Answer

An unlocked server room is a vulnerability — a weakness that could be exploited by a threat actor.

Question 2

Which threat category encompasses acts of nature such as floods, earthquakes, and hurricanes?

Accepted Answer

Environmental threats

Answer

Environmental threats include natural disasters and acts of nature that can impact organizational security.

Question 3

A security investigator is conducting a Business Impact Analysis (BIA). What is the PRIMARY output of a BIA?

Accepted Answer

Prioritized critical business functions and recovery time objectives

Answer

A BIA identifies critical business functions and establishes the maximum tolerable downtime and recovery objectives for each.

Question 4

What type of threat involves a malicious insider gradually increasing their access privileges over time without authorization?

Accepted Answer

Privilege escalation

Answer

Privilege escalation involves an insider or attacker gaining higher-level access rights than they are authorized to have.

Question 5

In a security risk matrix, which combination represents the HIGHEST priority for immediate action?

Accepted Answer

High likelihood / High impact

Answer

High likelihood combined with high impact places a risk in the critical zone, requiring immediate mitigation efforts.

(CSI) Certified Security Investigator Practice Test