CSS Risk Evaluation & Threat Analysis 2

Question 1

A security supervisor is conducting a risk assessment for a newly opened retail store. Which step should occur FIRST in the risk evaluation process?

Accepted Answer

Identify assets to be protected

Answer

Asset identification is the foundational first step in any risk evaluation because you cannot assess threats or vulnerabilities without knowing what needs protection.

Question 2

Which formula correctly expresses the relationship used to calculate risk in security management?

Accepted Answer

Risk = Threat × Vulnerability × Asset Value

Answer

Risk is determined by multiplying threat likelihood, vulnerability level, and the value of the asset at risk.

Question 3

A disgruntled employee who has inside knowledge of security procedures and access to restricted areas is best classified as what type of threat?

Accepted Answer

Insider threat

Answer

An insider threat involves individuals with authorized access who misuse that access to harm the organization.

Question 4

During a threat analysis, a security supervisor discovers that a competitor has been gathering intelligence on the company's operations. This is an example of which threat category?

Accepted Answer

Corporate espionage

Answer

Corporate espionage involves deliberate efforts by competitors or adversaries to gather proprietary business intelligence.

Question 5

A vulnerability assessment reveals that a server room has no secondary lock on the door. In risk terminology, this lack of protection is called a:

Accepted Answer

Vulnerability

Answer

A vulnerability is a weakness or gap in security measures that could be exploited by a threat to cause harm.

(CSS) Certified Security Supervisor Practice Test

(CSS) Certified Security Supervisor Practice Test

CSS Risk Evaluation & Threat Analysis 2