CIS 333 WEEK 2 QUIZ 4

• Question 1

0 out of 1 points

	Which of the following best describes quantitative risk analysis? Answer

• Question 2

0 out of 1 points

	________ is the difference between the security controls you have in place and the controls you need to have in place in order to address all vulnerabilities. Answer

• Question 3

0 out of 1 points

	__________ tests interrupt the primary data center and transfer processing capability to an alternate site. Answer

• Question 4

0 out of 1 points

	You can use quantitative risk analysis for all risks on the risk register; however, the amount of effort required may be overkill for _____________ risks. Answer

• Question 5

0 out of 1 points

	What is meant by risk register? Answer

• Question 6

0 out of 1 points

	The goal of ____________ is to quantify possible outcomes of risks, determine probabilities of outcomes, identify high-impact risks, and develop plans based on risks. Answer

• Question 7

0 out of 1 points

	What is meant by annual rate of occurrence (ARO)? Answer

• Question 8

0 out of 1 points

	The process of managing risks starts by identifying __________. Answer

• Question 9

0 out of 1 points

	The recovery point objective (RPO) identifies the amount of _________ that is acceptable. Answer

• Question 10

1 out of 1 points

	The first step in risk analysis is to determine what and where the organization’s _________ are located. Answer

• Question 11

0 out of 1 points

	How often should an organization perform a risk management plan? Answer

• Question 12

1 out of 1 points

	A ___________ is a formal analysis of an organization’s functions and activities that classifies them as critical or noncritical. Answer

• Question 13

0 out of 1 points

	A parallel test evaluates the effectiveness of the ________ by enabling full processing capability at an alternate data center without interrupting the primary data center. Answer