SAC Safety & Risk Management 2

Question 1

Which risk treatment option involves transferring the financial consequences of a risk to a third party?

Accepted Answer

Risk transference

Answer

Risk transference shifts financial liability to another party, typically through insurance or outsourcing contracts.

Question 2

A system administrator is classifying data stored on company servers. Which data classification level typically requires the MOST stringent access controls?

Accepted Answer

Top Secret / Restricted

Answer

Top Secret or Restricted classifications demand the highest level of access controls due to potential for severe harm if disclosed.

Question 3

What is the primary purpose of a Business Impact Analysis (BIA)?

Accepted Answer

To determine the financial and operational impact of service disruptions

Answer

A BIA identifies critical business functions and quantifies the impact of disruptions to help prioritize recovery efforts.

Question 4

Which metric in disaster recovery planning defines the maximum acceptable amount of data loss measured in time?

Accepted Answer

RPO (Recovery Point Objective)

Answer

RPO defines how far back in time a recovery point must be, essentially the maximum tolerable data loss window.

Question 5

An attacker exploits a known vulnerability in an unpatched server. Which risk management control failure does this BEST represent?

Accepted Answer

Failure of preventive controls

Answer

Preventive controls, such as patch management, are designed to stop incidents before they occur; failure to patch allows exploitation.

(SAC) System Administration Certification Practice Test

(SAC) System Administration Certification Practice Test

SAC Safety & Risk Management 2