Microsoft Networking Essentials Exam Risk Assessment & Management 2

Question 1

A company identifies that a flood could destroy its on-premises servers. Which risk response strategy involves purchasing flood insurance?

Accepted Answer

Risk transference

Answer

Risk avoidance

Answer

Risk mitigation

Answer

Risk acceptance

Question 2

Which quantitative risk metric expresses the expected monetary loss from a risk over a one-year period?

Accepted Answer

Annual Loss Expectancy (ALE)

Answer

Single Loss Expectancy (SLE)

Answer

Exposure Factor (EF)

Answer

Return on Security Investment (ROSI)

Question 3

During a risk assessment, an analyst rates threats based on gut feeling and experience rather than financial figures. This approach is called:

Accepted Answer

Qualitative risk analysis

Answer

Quantitative risk analysis

Answer

Residual risk analysis

Answer

Threat modeling

Question 4

After implementing security controls, the remaining risk that has not been fully eliminated is known as:

Accepted Answer

Residual risk

Answer

Inherent risk

Answer

Secondary risk

Answer

Control risk

Question 5

A network administrator discovers a vulnerability but decides the cost to fix it exceeds the potential loss. The organization documents this decision. Which strategy is being used?

Accepted Answer

Risk acceptance

Answer

Risk avoidance

Answer

Risk mitigation

Answer

Risk transference

Question 6

Which NIST publication provides a framework specifically designed to help organizations manage cybersecurity risk?

Accepted Answer

NIST CSF 1.1

Answer

NIST SP 800-53

Answer

NIST SP 800-30

Answer

NIST SP 800-171

Question 7

An Exposure Factor (EF) of 0.40 means:

Accepted Answer

An asset loses 40% of its value if a threat occurs

Answer

40% of assets are at risk

Answer

The threat occurs 40 times per year

Answer

40% of controls are ineffective