CSS Risk Evaluation & Threat Analysis 3

Question 1

Which of the following best describes the concept of 'residual risk' in security management?

Accepted Answer

The risk remaining after countermeasures have been implemented

Answer

Residual risk is the level of risk that remains after security controls and countermeasures have been put in place.

Question 2

A security supervisor is asked to perform a Business Impact Analysis (BIA). What is the PRIMARY purpose of this assessment?

Accepted Answer

Determine how security incidents would affect critical business operations

Answer

A Business Impact Analysis identifies the effects that security incidents or disruptions would have on critical business functions and operations.

Question 3

In a threat analysis, 'frequency of occurrence' refers to:

Accepted Answer

The likelihood that a specific threat will materialize within a given period

Answer

Frequency of occurrence measures the probability or rate at which a particular threat event is expected to happen over a defined time period.

Question 4

A CSS candidate is reviewing a threat environment for a hospital. Which of the following would be classified as a natural hazard threat?

Accepted Answer

A tornado damaging the facility

Answer

Natural hazards are threats arising from natural phenomena such as tornadoes, earthquakes, floods, and severe weather.

Question 5

When conducting target hardening as part of a risk mitigation strategy, a security supervisor is primarily attempting to:

Accepted Answer

Reduce vulnerabilities to make the target less attractive to offenders

Answer

Target hardening involves implementing physical and procedural measures to reduce vulnerabilities and deter potential offenders.

(CSS) Certified Security Supervisor Practice Test