SDI Risk Assessment & Management 2

Question 1

Which risk treatment option involves sharing the financial impact of a risk with a third party?

Accepted Answer

Risk transfer

Answer

Risk transfer shifts the financial burden of a risk to another party, such as through insurance or outsourcing.

Question 2

A service desk manager notices that a critical vendor is the sole supplier of a key software component. What type of risk does this represent?

Accepted Answer

Single point of failure risk

Answer

Reliance on a single vendor for a critical component creates a single point of failure risk, threatening service continuity.

Question 3

In the context of SDI risk management, what is the PRIMARY purpose of a risk register?

Accepted Answer

To record, track, and manage identified risks in a structured format

Answer

A risk register is a central document used to record identified risks, their assessments, owners, and treatment plans.

Question 4

When calculating a risk score using likelihood and impact, a risk with a likelihood of 3 and an impact of 4 on a 1-5 scale would score:

Accepted Answer

12

Answer

Risk scores are typically calculated by multiplying likelihood by impact, so 3 × 4 = 12.

Question 5

Which of the following best describes 'inherent risk' in a service desk environment?

Accepted Answer

Risk that exists before any controls or mitigations are in place

Answer

Inherent risk is the level of risk that exists in the absence of any control measures or mitigations.

(SDI) Service Desk Institute Certifications Practice Test