MCTS 70-642 Risk Assessment & Management 4

Question 1

A Windows Server 2008 administrator is implementing a risk management framework and needs to determine how often a specific threat event is expected to occur within a 12-month period. Which term describes this metric?

Accepted Answer

Annualized Rate of Occurrence (ARO)

Answer

ARO is the estimated frequency, expressed as a decimal or integer, that a specific threat is expected to occur within one year.

Question 2

When hardening a Windows Server 2008 DHCP server, an administrator applies the principle of least privilege to service accounts. Which risk management concept does this control directly address?

Accepted Answer

Vulnerability reduction

Answer

Least privilege reduces the attack surface by limiting what a compromised account can do, directly reducing system vulnerability to privilege escalation.

Question 3

A risk assessment for a Windows Server 2008 environment identifies that a database server holds data valued at $200,000, and a fire could destroy 40% of it. What is the Single Loss Expectancy (SLE)?

Accepted Answer

$80,000

Answer

SLE = Asset Value × Exposure Factor = $200,000 × 0.40 = $80,000.

Question 4

An organization has completed a risk assessment for its Windows Server 2008 infrastructure and documented all findings. The next step in the risk management lifecycle is to select and implement appropriate safeguards. Which phase does this represent?

Accepted Answer

Risk mitigation

Answer

Risk mitigation is the phase where selected controls and countermeasures are implemented to reduce identified risks to acceptable levels.

Question 5

A Windows Server 2008 administrator is evaluating security controls and distinguishes between controls that detect incidents after they occur versus those that prevent them. Which control type detects but does not prevent security events?

Accepted Answer

Detective control

Answer

Detective controls, such as audit logs and intrusion detection systems, identify and alert on security events but do not stop them from occurring.

MCTS 70-642 Exam Practice Test

MCTS 70-642 Exam Practice Test

MCTS 70-642 Risk Assessment & Management 4