Risk Management (CompTIA Security+ CG)

A script kiddie is a classic example of a(n)

• Attacker

• Criminal

• Threat

• Threat actor

Risk is often considered formulaically as

• Risk = Probability x Threat

• Risk = Threat x Impact

• Risk = Vulnerability x Threat

• Risk = Probability x Impact

A ________ is a description of a complex process, concentrating on major steps and the flows between the steps.

• Law

• Procedure

• Framework

• Control

A company make a document called "Acceptable Use" that defines what the company allows users to do and not do on their work systems. The company requires new employees to read and sign this. What is the type of document called?

• Standard

• Policy

• Procedure

• Control

A lock on the door of a building is a example of a control

• Deterrent

• Preventive

• Detective

• Corrective

A No Trespassing sign is an example of a control.

• Deterrent

• Preventive

• Detective

• Corrective

An asset's exposure factor is measured in .

• Dollar

• Percentage

• Unit

• Reputation

Which of the following equation is correct?

• Single-Loss Expectancy = Asset Value x Exposure Factor

• Annualized Rate of Occurrence = Asset Value x Exposure Factor

• Annualized Loss Expectancy = Asset Value x Exposure Factor

• Single Rate of Occurrence = Asset Value x Exposure Factor

Financial is one type of business impact. Which of the following names another?

• Pride

• Technical

• Device

• Reputation

Which of the following represents the component manufacture's best guess (based on historical data) regarding how much time will pass between major failures of that component?

• MTTR

• MTBF

• MTMB

• MOAB