CSP Threat Evaluation & Risk Analysis 3

Question 1

A risk analyst calculates that a warehouse has a 15% annual probability of experiencing cargo theft. This figure represents the:

Accepted Answer

Annualized rate of occurrence

Answer

The annualized rate of occurrence (ARO) expresses the estimated frequency with which a specific threat is expected to occur within a one-year period.

Question 2

When evaluating threats in a high-rise office building, which factor would most significantly increase the vulnerability rating for the lobby?

Accepted Answer

Lack of visitor management system and open access to elevators

Answer

The absence of a visitor management system combined with unrestricted elevator access eliminates layered access control, dramatically increasing lobby vulnerability.

Question 3

A threat evaluation matrix rates threat actors on capability and intent. An actor with HIGH capability but LOW intent should be classified as:

Accepted Answer

Moderate concern requiring monitoring but not immediate action

Answer

High capability with low intent warrants monitoring because intent can change, but does not yet justify the same countermeasure investment as a high-capability, high-intent actor.

Question 4

During a risk assessment at a data center, the analyst identifies that backup power systems have not been tested in 18 months. This finding most directly affects which risk component?

Accepted Answer

Countermeasure effectiveness

Answer

Untested backup power systems cannot be relied upon, reducing the effectiveness of this countermeasure and increasing overall residual risk.

Question 5

Social engineering attacks targeting employees with legitimate system access are most effectively countered at which risk mitigation level?

Accepted Answer

Personnel security and awareness training

Answer

Since social engineering exploits human behavior rather than physical or technical gaps, personnel security awareness training directly addresses the root vulnerability.

(CSP) Certified Surveillance Professional Practice Test

(CSP) Certified Surveillance Professional Practice Test

CSP Threat Evaluation & Risk Analysis 3