Microsoft Networking Essentials Exam Risk Assessment & Management 4

Question 1

An organization maps out every critical business process and determines which IT systems support each process. This activity is part of:

Accepted Answer

Business Impact Analysis

Answer

Penetration testing

Answer

Threat hunting

Answer

Gap analysis

Question 2

Which type of control is a security camera used to record activity in a server room?

Accepted Answer

Detective

Answer

Preventive

Answer

Corrective

Answer

Deterrent

Question 3

An employee accidentally deletes a shared network folder. Which risk category best describes this event?

Accepted Answer

Human error (internal threat)

Answer

External threat

Answer

Natural disaster

Answer

Compliance violation

Question 4

A risk register is BEST described as:

Accepted Answer

A documented inventory of identified risks, their ratings, and assigned owners

Answer

A log of firewall rules blocking threats

Answer

A list of all software vulnerabilities found by a scanner

Answer

A policy document defining acceptable use

Question 5

Which security principle ensures that users and systems are given only the access necessary to perform their job functions?

Accepted Answer

Least privilege

Answer

Defense in depth

Answer

Separation of duties

Answer

Need to know

Question 6

A company conducts an annual review of its risk management plan to account for new technologies and emerging threats. This demonstrates which risk management practice?

Accepted Answer

Continuous risk monitoring

Answer

One-time risk assessment

Answer

Risk transference

Answer

Vulnerability disclosure

Question 7

What does the Annualized Rate of Occurrence (ARO) represent in risk calculations?

Accepted Answer

The estimated number of times a threat event is expected to occur per year

Answer

The dollar value of an asset

Answer

The percentage of asset value lost per incident

Answer

The time needed to recover from an incident