SCP-500 Risk Assessment & Management 2 — Questions and Answers
Question 1: In SolarWinds Network Performance Monitor, which threshold type triggers an alert based on a calculated baseline rather than a fixed value?
- Static threshold
- Dynamic baseline threshold (Correct answer)
- Absolute threshold
- Manual override threshold
Correct answer: Dynamic baseline threshold
Dynamic baseline thresholds adapt to normal traffic patterns and alert when deviations exceed a configured percentage or standard deviation.
Question 2: A risk register in SolarWinds ITSM context typically captures all of the following EXCEPT:
- Risk likelihood score
- Risk owner assignment
- Firewall ACL rule sets (Correct answer)
- Mitigation action plan
Correct answer: Firewall ACL rule sets
A risk register records risk descriptions, likelihood, impact, owners, and mitigations — not firewall rule configurations.
Question 3: When using SolarWinds Patch Manager to reduce vulnerability risk, what is the FIRST step before deploying patches to production servers?
- Deploy patches to all servers simultaneously
- Test patches in a staging environment (Correct answer)
- Disable antivirus software
- Archive current patch baselines
Correct answer: Test patches in a staging environment
Patches should be validated in a staging environment to ensure they do not introduce instability before production rollout.
Question 4: Which SolarWinds product provides risk-reducing visibility into configuration drift on network devices?
- Network Configuration Manager (NCM) (Correct answer)
- Web Help Desk
- IP Address Manager (IPAM)
- Serv-U FTP Server
Correct answer: Network Configuration Manager (NCM)
NCM detects and alerts on unauthorized or unexpected configuration changes, reducing the risk of misconfigured devices.
Question 5: A qualitative risk assessment approach differs from a quantitative approach in that it:
- Always uses dollar amounts to express risk
- Uses descriptive scales such as High/Medium/Low instead of numeric values (Correct answer)
- Requires actuarial data tables
- Calculates Annual Loss Expectancy (ALE)
Correct answer: Uses descriptive scales such as High/Medium/Low instead of numeric values
Qualitative risk assessment categorizes risks using descriptive ratings rather than precise monetary calculations.
Question 6: In SolarWinds NPM, setting a 'Warning' alert at 70% CPU and a 'Critical' alert at 90% CPU is an example of:
- Tiered threshold risk management (Correct answer)
- Dynamic anomaly detection
- Capacity forecasting
- Incident escalation policy
Correct answer: Tiered threshold risk management
Using multiple severity levels (Warning/Critical) with different thresholds creates a tiered early-warning system for risk management.
Question 7: Which risk treatment option involves purchasing cyber liability insurance to offset potential financial loss from a network breach?
- Risk avoidance
- Risk mitigation
- Risk transfer (Correct answer)
- Risk acceptance
Correct answer: Risk transfer
Risk transfer shifts the financial burden of a risk to a third party, such as an insurer.
SCP-500 Risk Assessment & Management 2
In SolarWinds Network Performance Monitor, which threshold type triggers an alert based on a calculated baseline rather than a fixed value?