Information Assurance CSF

1. What is the primary goal of risk identification?

• To eliminate all risks

• To recognize potential threats and vulnerabilities

• To develop security policies

• To conduct training sessions

Which of the following is a method used in risk analysis?

• Asset Inventory

• Fault Tree Analysis

• Threat Modeling

• All of the above

What is a common strategy in risk management?

• Ignoring risks

• Risk avoidance

• Risk proliferation

• Risk complacency

1. What does information assurance focus on?

• Technical aspects of security

• Compliance and governance

• Data encryption only

• Firewalls and antivirus software

Which statement best describes the difference between information assurance and information security?

• Information assurance is focused on technical defenses, while information security is about policy.

• Information assurance includes risk management, while information security primarily focuses on protecting systems from threats.

• Information assurance is a subset of information security.

• There is no difference; they are the same.

True/False:

Risk management is an ongoing process that includes identifying, assessing, and mitigating risks.

• True

• False

True/False:

6. Information security primarily concerns the integrity and availability of information.

• 6. True

• 6. False

True/False:

Qualitative analysis in risk analysis involves numerical assessments of risk.

• True

• False