IT Risk Fundamentals Practice Test

Review 72 IT-RISK-FUNDAMENTALS practice questions with answer explanations and community insights.

Question 1

Which of the following is considered an exploit event?

  1. Any event that is verified as a security breach
  2. The actual occurrence of an adverse event
  3. An attacker takes advantage of a vulnerability

Question 2

Of the following, which stakeholder group is MOST often responsible for risk governance?

  1. Board of directors
  2. Enterprise risk management (ERM)
  3. Business units

Question 3

Which of the following is MOST likely to promote ethical and open communication of risk management activities at the executive level?

  1. Increasing the frequency of risk status reports
  2. Recommending risk tolerance levels to the business
  3. Expressing risk results in financial terms

Question 4

Which of the following presents the GREATEST risk for the continued existence of an enterprise?

  1. When its risk appetite and tolerance are reviewed annually
  2. When its actual risk eventually exceeds organizational risk appetite
  3. When its risk appetite and actual risk exceed its risk capacity

Question 5

How does an enterprise decide how much risk it is willing to take to meet its business objectives?

  1. By conducting research on industry standards for acceptable risk based on similar businesses
  2. By identifying the risk conditions of the business and the impact of the loss if these risks materialize
  3. By surveying business initiatives to determine what risks would cease their operations