CAP Risk Management & Security Evaluation 1

Question 1

What is the primary objective of risk management in cybersecurity?

Accepted Answer

To identify, assess, and mitigate risks

Answer

To eliminate all risks completely

Answer

To ignore minor security threats

Answer

To avoid compliance requirements

Question 2

Which framework is commonly used for risk management in information security?

Accepted Answer

NIST Risk Management Framework (RMF)

Answer

ISO 27001

Answer

PCI DSS

Answer

HIPAA

Question 3

Why is a security assessment critical in risk management?

Accepted Answer

To identify vulnerabilities before exploitation

Answer

To delay compliance audits

Answer

To eliminate all cybersecurity risks

Answer

To reduce the need for security policies

Question 4

What is the purpose of a risk assessment in cybersecurity?

Accepted Answer

To evaluate threats and vulnerabilities

Answer

To ignore security threats

Answer

To avoid implementing security measures

Answer

To replace incident response procedures

Question 5

Which key component is essential in a security risk management plan?

Accepted Answer

Continuous monitoring of security controls

Answer

Ignoring new threats

Answer

Relying only on annual assessments

Answer

Removing all access controls

Question 6

How does compliance impact risk management in cybersecurity?

Accepted Answer

It helps reduce risk and meet regulations

Answer

It increases security risks

Answer

It eliminates the need for risk management

Answer

It allows organizations to bypass security policies