ISP Security Risk Management 3

Question 1

Which component of the risk equation directly measures the probability that a specific threat will materialize within a defined time period?

Accepted Answer

Threat likelihood

Answer

Threat likelihood (or probability) quantifies how often or how probably a specific threat event will occur within a given timeframe.

Question 2

An ISP candidate is conducting a Business Impact Analysis (BIA). The PRIMARY purpose of this analysis is to:

Accepted Answer

Determine the financial and operational consequences of disruptions to critical functions

Answer

A BIA identifies critical business functions and quantifies the impact their disruption would have on the organization's operations and finances.

Question 3

In risk management, the 'single loss expectancy' (SLE) is calculated by multiplying:

Accepted Answer

Asset value by exposure factor

Answer

SLE = Asset Value × Exposure Factor, representing the expected monetary loss from a single occurrence of a specific threat.

Question 4

Which type of security assessment involves an independent reviewer examining policies, procedures, and controls without physically testing them?

Accepted Answer

Security audit

Answer

A security audit is a systematic review of documentation, policies, and controls to verify compliance and adequacy without active exploitation attempts.

Question 5

The CARVER matrix used in target vulnerability assessments evaluates targets across six criteria. Which of the following is NOT one of the CARVER criteria?

Accepted Answer

Redundancy

Answer

CARVER stands for Criticality, Accessibility, Recuperability, Vulnerability, Effect, and Recognizability — Redundancy is not one of the six criteria.

(ISP) Industrial Security Professional Certification Practice Test

(ISP) Industrial Security Professional Certification Practice Test

ISP Security Risk Management 3