IASQuiz#1-Finals

Which of the following best describes the primary purpose of risk management?

• To remove every possible risk from business operations.

• To rely solely on insurance for mitigating risks.

• To safeguard assets from losses using strategies and tools.

• To focus exclusively on physical security measures.

Which of the following reflects the scope of traditional risk management?

• Addressing only digital threats in operations.

• Avoiding physical security measures completely.

• Protecting assets and people from possible losses.

• Giving priority to cybersecurity over other risks.

What is the primary focus of cybersecurity risk management?

• Installing physical security devices like locks and vaults.

• Buying insurance policies to recover from cyberattacks.

• Using strategies, technology, and training to prevent attacks.

• Relying solely on user education to mitigate cybersecurity risks.

What role does user education play in cybersecurity risk management?

• It minimizes the need for advanced security technologies.

• It replaces strategies and technologies in securing digital assets.

• It helps users recognize and respond to potential cybersecurity threats.

• It focuses on teaching employees how to use physical locks and vaults.

What do Organizational Risk Management Controls focus on?

• How users are granted access to systems.

• How the system is managed and maintained.

• How the company manages risks.

• How data is protected in the company’s infrastructure.

Which controls are responsible for granting users access to systems?

• Administration Controls

• User Provisioning Controls

• User Authentication Controls

• Infrastructure Data Protection Controls

What do Administration Controls ensure?

• How data is protected in the company’s infrastructure.

• How the system is managed and maintained.

• How users are verified before accessing systems.

• How physical security and environment are maintained in data centers.

What is the role of User Authentication Controls?

• To protect the company’s data in the infrastructure.

• To verify users before they can access systems.

• To grant access to systems for users.

• To ensure business operations continue during disruptions.

Which controls focus on protecting data in the company’s infrastructure?

• User Provisioning Controls

• Infrastructure Data Protection Controls

• Data Center Physical and Environmental Security Controls

• Continuity of Operations Controls

What do Continuity of Operations Controls focus on?

• How the system is managed and maintained.

• How physical security is maintained in data centers.

• How users are granted access to systems.

• How the business continues to operate during disruptions.