Microsoft Networking Essentials Exam Risk Assessment & Management 3

Question 1

A security team creates a list of all possible threats, ranks them by likelihood and impact, and plots them on a grid. What is this grid called?

Accepted Answer

Risk matrix

Answer

Vulnerability scan report

Answer

Business impact analysis

Answer

Threat intelligence feed

Question 2

Which component of a Business Impact Analysis (BIA) identifies the maximum tolerable downtime before significant harm occurs?

Accepted Answer

Maximum Tolerable Downtime (MTD)

Answer

Recovery Time Objective (RTO)

Answer

Recovery Point Objective (RPO)

Answer

Mean Time to Repair (MTTR)

Question 3

A threat actor deliberately causes network congestion to make services unavailable. Which type of threat does this represent?

Accepted Answer

Denial of Service (DoS)

Answer

Eavesdropping

Answer

Spoofing

Answer

Man-in-the-Middle

Question 4

What is the PRIMARY purpose of a vulnerability assessment in the risk management process?

Accepted Answer

To identify and rank weaknesses that threats could exploit

Answer

To calculate the annual loss expectancy

Answer

To implement security controls

Answer

To transfer risk to a third party

Question 5

Which risk management concept describes the level of risk an organization is willing to accept without requiring additional controls?

Accepted Answer

Risk appetite

Answer

Risk threshold

Answer

Residual risk

Answer

Control objective

Question 6

A company backs up its data to an offsite location to ensure recovery after a disaster. This practice primarily addresses which risk category?

Accepted Answer

Operational risk

Answer

Reputational risk

Answer

Compliance risk

Answer

Strategic risk

Question 7

When calculating Single Loss Expectancy (SLE), which two values are multiplied?

Accepted Answer

Asset value × Exposure Factor

Answer

Asset value × Annualized Rate of Occurrence

Answer

Exposure Factor × Annualized Rate of Occurrence

Answer

Threat likelihood × Control effectiveness