IASQuiz#1-Finals

Which of the following best describes the primary purpose of risk management?

• To eliminate all possible risks in business operations.

• To rely solely on insurance for mitigating risks.

• To protect assets from potential losses through various strategies and tools.

• To focus exclusively on physical security measures.

Which of the following reflects the scope of traditional risk management?

• Focusing on digital threats exclusively.

• Avoiding the use of physical security devices.

• Protecting both physical assets and human lives from potential losses.

• Prioritizing cybersecurity over other risk areas.

What is the primary focus of cybersecurity risk management?

• Installing physical security devices like locks and vaults.

• 
  Purchasing insurance policies to recover from cyberattacks.

• Combining strategies, technologies, and user education to protect against cyberattacks.

• Relying solely on user education to mitigate cybersecurity risks.

at role does user education play in cybersecurity risk management?

• It minimizes the need for advanced security technologies.

• It replaces strategies and technologies in securing digital assets.

• It helps users recognize and respond to potential cybersecurity threats.

• It focuses on teaching employees how to use physical locks and vaults.

What do Organizational Risk Management Controls focus on?

• How users are granted access to systems.

• How the system is managed and maintained.

• How the company manages risks.

• How data is protected in the company’s infrastructure.

Which controls are responsible for granting users access to systems?

• Administration Controls

• User Provisioning Controls

• User Authentication Controls

• Infrastructure Data Protection Controls

What do Administration Controls ensure?

• How data is protected in the company’s infrastructure.

• How the system is managed and maintained.

• How users are verified before accessing systems.

• 
  How physical security and environment are maintained in data centers.

What is the role of User Authentication Controls?

• To protect the company’s data in the infrastructure.

• To verify users before they can access systems.

• To grant access to systems for users.

• To ensure business operations continue during disruptions.

Which controls focus on protecting data in the company’s infrastructure?

• User Provisioning Controls

• Infrastructure Data Protection Controls

• Data Center Physical and Environmental Security Controls

• Continuity of Operations Controls

What do Continuity of Operations Controls focus on?

• How the system is managed and maintained.

• How physical security is maintained in data centers.

• How users are granted access to systems.

• How the business continues to operate during disruptions.