Microsoft Networking Essentials Exam Risk Assessment & Management 2

Question 1

A company identifies that a flood could destroy its on-premises servers. Which risk response strategy involves purchasing flood insurance?

Accepted Answer

Risk transference

Answer

Risk transference shifts the financial burden of a risk to a third party, such as an insurance company.

Question 2

Which quantitative risk metric expresses the expected monetary loss from a risk over a one-year period?

Accepted Answer

Annual Loss Expectancy (ALE)

Answer

ALE = SLE × ARO and represents the annualized expected cost of a specific risk.

Question 3

During a risk assessment, an analyst rates threats based on gut feeling and experience rather than financial figures. This approach is called:

Accepted Answer

Qualitative risk analysis

Answer

Qualitative analysis uses subjective ratings (e.g., High/Medium/Low) rather than exact monetary values.

Question 4

After implementing security controls, the remaining risk that has not been fully eliminated is known as:

Accepted Answer

Residual risk

Answer

Residual risk is the risk that remains after countermeasures have been applied.

Question 5

A network administrator discovers a vulnerability but decides the cost to fix it exceeds the potential loss. The organization documents this decision. Which strategy is being used?

Accepted Answer

Risk acceptance

Answer

Risk acceptance means the organization consciously chooses to tolerate the risk because addressing it is not cost-effective.

Microsoft Networking Essentials Exam Practice Test

Microsoft Networking Essentials Exam Practice Test

Microsoft Networking Essentials Exam Risk Assessment & Management 2