SSCP Risk Management & Vulnerability Assessment

Question 1

What is the first step in the risk management process?

Accepted Answer

Identify potential risks

Answer

Assess risk impact.

Answer

Monitor residual risks.

Answer

Transfer the risk.

Question 2

What is a vulnerability in information security?

Accepted Answer

A weakness that can be exploited

Answer

A type of malware.

Answer

An unauthorized access.

Answer

A firewall rule.

Question 3

Which tool is commonly used for vulnerability assessment?

Accepted Answer

Nessus

Answer

Outlook

Answer

Photoshop

Answer

Visual Studio

Question 4

What is residual risk?

Accepted Answer

Remaining risk after controls

Answer

Risk before assessment.

Answer

Risk that has been transferred.

Answer

A fully eliminated risk.

Question 5

Which of the following is a qualitative risk assessment technique?

Accepted Answer

Risk matrix

Answer

Monte Carlo simulation

Answer

Net present value

Answer

Bayesian network

Question 6

What does risk mitigation aim to do?

Accepted Answer

Reduce threat impact or likelihood

Answer

Increase the risk impact.

Answer

Ignore the threats.

Answer

Transfer the risk to regulators.

Question 7

Which document defines an organization’s risk tolerance?

Accepted Answer

Risk management policy

Answer

Asset inventory

Answer

Data classification plan

Answer

Security incident report

Question 8

What is threat modeling used for?

Accepted Answer

To predict and reduce threats to systems

Answer

To scan for malware.

Answer

To write secure code.

Answer

To deploy firewalls.

Question 9

What is the primary goal of risk assessment?

Accepted Answer

To evaluate and prioritize security risks

Answer

To eliminate all risk.

Answer

To ignore low-level risks.

Answer

To hire more staff.