MCTS 70-642 Risk Assessment & Management 3

Question 1

A Windows Server 2008 network security team is conducting a Business Impact Analysis (BIA). Which metric defines the maximum tolerable downtime before a system outage causes irreparable business harm?

Accepted Answer

Maximum Tolerable Downtime (MTD)

Answer

Maximum Tolerable Downtime (MTD) is the longest time a business process can be unavailable before the organization suffers catastrophic harm.

Question 2

An administrator is reviewing Windows Server 2008 logs and notices repeated failed authentication attempts from multiple IP addresses targeting the same account. According to risk management principles, which threat category does this most likely represent?

Accepted Answer

Structured external attack

Answer

Coordinated brute-force attempts from multiple IPs indicate a structured external attack with deliberate planning and resources behind it.

Question 3

When assessing risk for a Windows Server 2008 DNS server, which vulnerability assessment technique passively examines network traffic without sending probe packets to targets?

Accepted Answer

Passive scanning

Answer

Passive scanning analyzes existing network traffic and logs to identify vulnerabilities without generating traffic that could alert targets or disrupt services.

Question 4

A security manager wants to assess risk to Windows Server 2008 infrastructure using a method that relies on expert judgment and descriptive categories like High, Medium, and Low rather than specific numbers. Which approach is being used?

Accepted Answer

Qualitative risk assessment

Answer

Qualitative risk assessment uses subjective categories and expert opinion rather than precise financial figures to rank and prioritize risks.

Question 5

After deploying security patches on a Windows Server 2008 environment, some vulnerability risk still remains because no patch fully eliminates all attack vectors. What is this remaining risk called?

Accepted Answer

Residual risk

Answer

Residual risk is the risk that remains after all controls and countermeasures have been applied to reduce the original inherent risk.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Risk Assessment & Management 3