Microsoft Networking Essentials Exam Risk Assessment & Management 4

Question 1

An organization maps out every critical business process and determines which IT systems support each process. This activity is part of:

Accepted Answer

Business Impact Analysis

Answer

A BIA identifies critical business functions and the IT resources that support them to prioritize recovery efforts.

Question 2

Which type of control is a security camera used to record activity in a server room?

Accepted Answer

Detective

Answer

A detective control identifies and records incidents after or as they occur, like security cameras capturing events.

Question 3

An employee accidentally deletes a shared network folder. Which risk category best describes this event?

Accepted Answer

Human error (internal threat)

Answer

Accidental data deletion by staff is classified as an internal human error threat.

Question 4

A risk register is BEST described as:

Accepted Answer

A documented inventory of identified risks, their ratings, and assigned owners

Answer

A risk register tracks each identified risk, its likelihood, impact, owner, and mitigation status.

Question 5

Which security principle ensures that users and systems are given only the access necessary to perform their job functions?

Accepted Answer

Least privilege

Answer

The principle of least privilege limits permissions to the minimum required, reducing the attack surface.

Microsoft Networking Essentials Exam Practice Test