Safety & Risk Management Flashcards
7 cards from real SAC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Safety & Risk Management flashcards as text
Which term describes the practice of running two identical IT systems simultaneously so that if one fails, the other takes over immediately with no downtime?
Answer: Hot standby / Active-active failover
Hot standby or active-active configurations run parallel systems that instantly absorb traffic if one node fails, providing zero-downtime failover.
A risk register entry has been reviewed and leadership decides to accept the risk without additional controls because mitigation cost exceeds expected loss. This is an example of:
Answer: Residual risk acceptance
Residual risk acceptance occurs when the remaining risk after evaluation is deemed tolerable because the cost of further mitigation outweighs the benefit.
Which security control type is a CCTV camera system BEST classified as?
Answer: Detective and deterrent
CCTV cameras deter potential attackers (deterrent) and provide evidence for investigating incidents (detective), but do not actively stop attacks.
In risk assessment, what does 'threat likelihood' specifically measure?
Answer: The probability that a threat will exploit a vulnerability within a given timeframe
Threat likelihood measures the probability or frequency with which a threat source will successfully exploit a vulnerability during a specified period.
Which action should a system administrator take IMMEDIATELY upon discovering active malware on a production server?
Answer: Isolate the affected system from the network to contain the threat
Network isolation (containment) is the immediate priority to prevent malware from spreading laterally or exfiltrating data while preserving forensic evidence.
What is the MAIN purpose of performing a tabletop exercise in the context of disaster recovery?
Answer: To walk key stakeholders through hypothetical disaster scenarios to test plans verbally
Tabletop exercises are facilitated discussions where teams talk through disaster scenarios to identify gaps in plans without actual system disruption.
Under the principle of separation of duties, which scenario BEST illustrates a proper control?
Answer: One admin requests a change, a different admin reviews and approves it
Separation of duties requires that no single individual can complete a high-risk process alone, reducing fraud and error by splitting critical steps.