Web Traffic Risk Assessment & Management 3 — Questions and Answers
Question 1: In a traffic risk register, what does the 'residual risk' column represent?
- The total traffic lost last month
- The risk that remains after mitigation controls are applied (Correct answer)
- Duplicate traffic from bot crawlers
- Seasonal fluctuation in visits
Correct answer: The risk that remains after mitigation controls are applied
Residual risk is the level of risk that persists even after you have implemented all planned mitigation measures.
Question 2: A major referral partner announces it will shut down, removing 20% of your traffic. What mitigation strategy is most appropriate?
- Increase server bandwidth immediately
- Begin diversifying referral sources and accelerate owned-channel growth (Correct answer)
- File a legal complaint against the partner
- Redirect all URLs to a new domain
Correct answer: Begin diversifying referral sources and accelerate owned-channel growth
When a key referral source is at risk, the best mitigation is to reduce dependency by building alternative traffic channels before the shutdown.
Question 3: Which approach best describes 'risk transfer' in the context of web traffic?
- Moving traffic reporting to a third-party analytics tool
- Purchasing cyber insurance or SLA-backed CDN contracts that cover traffic downtime losses (Correct answer)
- Transferring SEO responsibilities to a contractor
- Setting up a subdomain for A/B testing
Correct answer: Purchasing cyber insurance or SLA-backed CDN contracts that cover traffic downtime losses
Risk transfer shifts the financial consequences of a risk to another party, such as insuring against downtime or using SLAs that include financial remedies.
Question 4: Your analytics shows a sudden 300% spike in traffic from an unknown source. What is the primary risk this represents?
- Positive viral marketing effect
- Bot or scraper traffic inflating metrics and potentially causing server overload (Correct answer)
- An SEO link-building success
- A successful email campaign launch
Correct answer: Bot or scraper traffic inflating metrics and potentially causing server overload
Unexplained traffic spikes often indicate bot activity, which can skew analytics data, inflate costs, and strain server resources.
Question 5: What is the purpose of a Business Continuity Plan (BCP) specifically for web traffic?
- To ensure the website remains accessible and traffic is maintained during disruptive events (Correct answer)
- To document all past traffic losses for tax purposes
- To schedule regular content publishing intervals
- To define the company's social media posting frequency
Correct answer: To ensure the website remains accessible and traffic is maintained during disruptive events
A BCP for web traffic outlines procedures to maintain or restore traffic flows during incidents like server outages, algorithm updates, or cyberattacks.
Question 6: Which risk treatment option involves accepting a known traffic risk without taking any action?
- Risk mitigation
- Risk avoidance
- Risk acceptance (Correct answer)
- Risk transfer
Correct answer: Risk acceptance
Risk acceptance is a deliberate decision to tolerate a risk, typically when the cost of mitigation exceeds the potential impact.
Question 7: A company notices its Core Web Vitals scores are declining. How does this relate to traffic risk management?
- It only affects mobile users, so desktop risk is unchanged
- Poor Core Web Vitals can trigger ranking drops, creating a future organic traffic risk (Correct answer)
- It is purely a UX concern with no SEO impact
- It only matters for paid search quality scores
Correct answer: Poor Core Web Vitals can trigger ranking drops, creating a future organic traffic risk
Google uses Core Web Vitals as a ranking factor, so sustained poor scores increase the probability of an organic traffic decline.
In a traffic risk register, what does the 'residual risk' column represent?