SCP-500 Risk Assessment & Management 5

Question 1

Which SolarWinds reporting feature allows risk managers to demonstrate compliance posture by showing device configuration adherence over time?

Accepted Answer

NCM compliance report against policy rules

Answer

NCM's compliance reports compare device configurations against defined policy rules and show historical adherence trends.

Question 2

The concept of 'risk appetite' in an organization defines:

Accepted Answer

The total amount of risk an organization is willing to accept in pursuit of its objectives

Answer

Risk appetite is the level of risk an organization consciously accepts as tolerable while pursuing its strategic goals.

Question 3

When SolarWinds NPM sends a 'node down' alert but the node is actually reachable, this is called a:

Accepted Answer

False positive

Answer

A false positive alert fires when no actual problem exists, which can erode trust in the monitoring system if not addressed.

Question 4

To reduce the risk of alert fatigue in a large SolarWinds deployment, administrators should:

Accepted Answer

Tune thresholds, use dependencies, and consolidate correlated alerts

Answer

Proper tuning, dependency mapping, and alert correlation reduce noise so that meaningful alerts receive appropriate attention.

Question 5

Which term describes the risk that remains after an organization has applied all planned security controls?

Accepted Answer

Residual risk

Answer

Residual risk is what persists after mitigation measures are implemented and must be explicitly accepted or further treated.

SCP-500 - Solarwinds Certified Professional Practice Test