SAC Safety & Risk Management 3 — Questions and Answers
Question 1: What is the correct formula for calculating quantitative risk using Annual Loss Expectancy (ALE)?
- ALE = SLE × ARO (Correct answer)
- ALE = ARO / SLE
- ALE = SLE + ARO
- ALE = SLE - EF
Correct answer: ALE = SLE × ARO
ALE is calculated by multiplying Single Loss Expectancy (SLE) by Annual Rate of Occurrence (ARO) to express risk in annual monetary terms.
Question 2: A system admin notices that a privileged account is being used outside of business hours repeatedly. Which security principle is MOST relevant for detecting this anomaly?
- Least privilege
- Separation of duties
- User behavior analytics / baseline monitoring (Correct answer)
- Defense in depth
Correct answer: User behavior analytics / baseline monitoring
User behavior analytics establishes a baseline of normal activity and flags deviations, such as off-hours privileged account usage.
Question 3: Which type of backup strategy captures only the data that has changed since the LAST FULL backup, regardless of incremental backups?
- Incremental backup
- Differential backup (Correct answer)
- Snapshot backup
- Mirror backup
Correct answer: Differential backup
A differential backup copies all data changed since the last full backup, making restores faster than incremental but requiring more storage.
Question 4: Which NIST framework function focuses on developing the organizational understanding to manage cybersecurity risk?
- Protect
- Identify (Correct answer)
- Detect
- Respond
Correct answer: Identify
The 'Identify' function of the NIST Cybersecurity Framework focuses on understanding assets, risks, and governance to enable risk management.
Question 5: A sysadmin is implementing controls for a server rack. Which physical security control serves as the FIRST line of defense against unauthorized physical access?
- Security cameras (CCTV)
- Biometric access controls on the data center door (Correct answer)
- Cable locks on individual servers
- Motion detectors inside the rack
Correct answer: Biometric access controls on the data center door
Biometric access controls at the data center entry point prevent unauthorized individuals from ever reaching the server rack.
Question 6: What term describes a vulnerability that is known to attackers but for which no vendor patch currently exists?
- Legacy vulnerability
- Day-one exploit
- Zero-day vulnerability (Correct answer)
- Residual risk
Correct answer: Zero-day vulnerability
A zero-day vulnerability is one that is unknown to or unpatched by the vendor, leaving systems exposed with no official fix available.
Question 7: In OSHA regulations relevant to data center environments, which standard primarily governs electrical safety for workers servicing live equipment?
- OSHA 29 CFR 1910.147 (Lockout/Tagout) (Correct answer)
- OSHA 29 CFR 1910.303 (Wiring Design)
- OSHA 29 CFR 1910.132 (PPE General)
- OSHA 29 CFR 1926.50 (First Aid Construction)
Correct answer: OSHA 29 CFR 1910.147 (Lockout/Tagout)
OSHA's Lockout/Tagout standard (1910.147) requires energy isolation procedures before servicing equipment to prevent accidental energization.
SAC Safety & Risk Management 3
What is the correct formula for calculating quantitative risk using Annual Loss Expectancy (ALE)?