Microsoft Networking Essentials Exam Risk Assessment & Management 3

Question 1

A security team creates a list of all possible threats, ranks them by likelihood and impact, and plots them on a grid. What is this grid called?

Accepted Answer

Risk matrix

Answer

A risk matrix (or risk heat map) plots likelihood against impact to prioritize risks visually.

Question 2

Which component of a Business Impact Analysis (BIA) identifies the maximum tolerable downtime before significant harm occurs?

Accepted Answer

Maximum Tolerable Downtime (MTD)

Answer

MTD defines the longest period a business function can be unavailable before causing unacceptable damage.

Question 3

A threat actor deliberately causes network congestion to make services unavailable. Which type of threat does this represent?

Accepted Answer

Denial of Service (DoS)

Answer

A DoS attack intentionally disrupts service availability by overwhelming network or system resources.

Question 4

What is the PRIMARY purpose of a vulnerability assessment in the risk management process?

Accepted Answer

To identify and rank weaknesses that threats could exploit

Answer

A vulnerability assessment systematically finds and prioritizes weaknesses before they are exploited.

Question 5

Which risk management concept describes the level of risk an organization is willing to accept without requiring additional controls?

Accepted Answer

Risk appetite

Answer

Risk appetite defines how much risk leadership is willing to tolerate in pursuit of organizational goals.

Microsoft Networking Essentials Exam Practice Test