212-89 Practice Test

212-89 Practice Test practice questions, page 7 of 7, with answer review and explanations.

Question 31

Risk management consists of three processes, risk assessment, mitigation and evaluation. Risk assessment determines the extent of the potential threat and the risk associated with an IT system through its SDLC. How many primary steps does NIST's risk assessment methodology involve?

  1. Twelve
  2. Four
  3. Six
  4. Nine

Question 32

Insider threats can be detected by observing concerning behaviors exhibited by insiders, such as conflicts with supervisors and coworkers, decline in performance, tardiness or unexplained absenteeism. Select the technique that helps in detecting insider threats:

  1. Correlating known patterns of suspicious and malicious behavior
  2. Protecting computer systems by implementing proper controls
  3. Making is compulsory for employees to sign a none disclosure agreement
  4. Categorizing information according to its sensitivity and access rights