TOC Cybersecurity & Risk Management 3

Question 1

In a risk matrix, a threat with HIGH likelihood and LOW impact should be handled with which risk response strategy?

Accepted Answer

Monitor and mitigate

Answer

High-likelihood, low-impact risks should be actively monitored and mitigated to reduce their frequency while managing their limited consequences.

Question 2

Which principle dictates that employees should only have access to the systems and data necessary for their specific job functions?

Accepted Answer

Least privilege

Answer

The principle of least privilege restricts user access rights to the minimum necessary to perform their job duties.

Question 3

An organization wants to ensure that no single employee can complete a sensitive HR transaction—such as a salary change—without a second approval. This control is called:

Accepted Answer

Separation of duties

Answer

Separation of duties requires multiple individuals to complete sensitive transactions, reducing the risk of fraud or error.

Question 4

A talent consultant is helping redesign onboarding to include cybersecurity awareness training. Which training format has been shown to be MOST effective at changing employee behavior?

Accepted Answer

Short, frequent, scenario-based micro-learning modules

Answer

Short, frequent, scenario-based micro-learning is more effective at sustaining behavioral change than infrequent, lengthy training sessions.

Question 5

Which regulation specifically requires US healthcare organizations to protect employee and patient health information (PHI) through administrative, physical, and technical safeguards?

Accepted Answer

HIPAA

Answer

HIPAA's Security Rule mandates administrative, physical, and technical safeguards to protect electronic protected health information (ePHI).

(TOC) Talent Optimization Consultant Practice Test

(TOC) Talent Optimization Consultant Practice Test

TOC Cybersecurity & Risk Management 3