IT Risk Fundamentals Practice Test

IT Risk Fundamentals Practice Test practice questions, page 3 of 3, with answer review and explanations.

Question 11

Which of the following is the PRIMARY outcome of a risk scoping activity?

  1. Identification of risk scenarios related to emerging technologies
  2. Identification of major risk factors to be benchmarked against industry competitors
  3. Identification of potential high-impact risk areas throughout the enterprise

Question 12

When determining the criticality of I&T assets, it is MOST important to identify:

  1. the asset owners who are accountable for asset valuation.
  2. the business processes in which the asset is used to achieve objectives.
  3. the infrastructure in which the asset is processed and stored.

Question 13

Which of the following represents a vulnerability associated with legacy systems using older technology?

  1. Rising costs associated with system maintenance
  2. Inability to patch or apply system updates
  3. Lost opportunity to capitalize on emerging technologies

Question 14

Which of the following should be found in an I&T asset inventory to help inform the risk identification process?

  1. Loss scenario information for assets
  2. Security classification of assets
  3. Regulatory requirements of assets