SAC Safety & Risk Management 3

Question 1

What is the correct formula for calculating quantitative risk using Annual Loss Expectancy (ALE)?

Accepted Answer

ALE = SLE × ARO

Answer

ALE is calculated by multiplying Single Loss Expectancy (SLE) by Annual Rate of Occurrence (ARO) to express risk in annual monetary terms.

Question 2

A system admin notices that a privileged account is being used outside of business hours repeatedly. Which security principle is MOST relevant for detecting this anomaly?

Accepted Answer

User behavior analytics / baseline monitoring

Answer

User behavior analytics establishes a baseline of normal activity and flags deviations, such as off-hours privileged account usage.

Question 3

Which type of backup strategy captures only the data that has changed since the LAST FULL backup, regardless of incremental backups?

Accepted Answer

Differential backup

Answer

A differential backup copies all data changed since the last full backup, making restores faster than incremental but requiring more storage.

Question 4

Which NIST framework function focuses on developing the organizational understanding to manage cybersecurity risk?

Accepted Answer

Identify

Answer

The 'Identify' function of the NIST Cybersecurity Framework focuses on understanding assets, risks, and governance to enable risk management.

Question 5

A sysadmin is implementing controls for a server rack. Which physical security control serves as the FIRST line of defense against unauthorized physical access?

Accepted Answer

Biometric access controls on the data center door

Answer

Biometric access controls at the data center entry point prevent unauthorized individuals from ever reaching the server rack.

(SAC) System Administration Certification Practice Test

(SAC) System Administration Certification Practice Test

SAC Safety & Risk Management 3