IT Risk Management Exam Answer
Key
Course Introduction
IT Risk Management explores the principles, frameworks, and practices involved in identifying, assessing, and mitigating risks associated with information technology systems. The course covers topics such as risk assessment methodologies, threat analysis, vulnerability management, compliance requirements, and the implementation of risk controls. Through case studies and real-world scenarios, students learn how to develop risk management strategies that align with organizational goals, comply with regulatory standards, and protect digital assets. By the end of the course, participants will be equipped to contribute effectively to risk-aware decision-making processes within IT environments.
Recommended Textbook
Disaster Recovery Principles and Practices 1st Edition by April Wells
Available Study Resources on Quizplus
9 Chapters
251 Verified Questions
251 Flashcards
Source URL: https://quizplus.com/study-set/2239
Page 2
Chapter 1: Introduction to Disaster Recovery
Available Study Resources on Quizplus for this Chatper
23 Verified Questions
23 Flashcards
Source URL: https://quizplus.com/quiz/44514
Sample Questions
Q1) Disaster recovery is __________ an information technology (IT)problem.
A)mostly
B)only
C)not just
D)not
Answer: C
Q2) In the event of a major disaster,the first goal of the business is to maintain the __________ sustainable level of services for the organization.
Answer: minimal
Q3) Disaster recovery typically looks at the __________.
A)long run
B)continuation of the business
C)overall business plan
D)short term
Answer: D
Q4) Any event or occurrence that can have a detrimental effect on an organization either in whole or in part is known as a(n)_______________________.
Answer: disaster
To view all questions and flashcards with answers, click on the resource link above.
Page 3
Chapter 2: Preparing to Develop the Disaster Recovery Plan
Available Study Resources on Quizplus for this Chatper
41 Verified Questions
41 Flashcards
Source URL: https://quizplus.com/quiz/44515
Sample Questions
Q1) It is often difficult to get complete management buy-in to a disaster recovery plan because the ______________________ associated with the cost of developing the plan and securing the necessary resources is rarely realized.
Answer: return on investment
Q2) Off-site Storage Team
A) maintains shipping
B) first responders
C) physically secures backup materials
D) provides assistance to end-users
E) ensures interests of the
Answer: C
Q3) The input the user support team provides allows planning for how to __________ users in a disaster situation.
Answer: support
Q4) The __________ will report to the disaster recovery team on the information in and processes relevant for their own particular department.
Answer: departmental recovery team
To view all questions and flashcards with answers, click on the resource link above.
4
Chapter 3: Assessing Risk and Impact
Available Study Resources on Quizplus for this Chatper
43 Verified Questions
43 Flashcards
Source URL: https://quizplus.com/quiz/44516
Sample Questions
Q1) For each asset that the company identifies,it needs to identify all the __________ that could impact each of the assets.
Answer: events or disasters
Q2) Service Level Agreement
A)role that each area in the organization plays
B)addresses the organization from the perspective of perceived threats
C)the level of harm that may occur from any given threat or risk
D)a contract that spells out the terms of service that will be provided
Answer: D
Q3) First
A)assess hazards
B)implement controls
C)test and evaluate
D)identify hazards
E)develop controls and make risk decisions
Answer: D
Q4) Realistic ramifications and weights should be assigned to all events and potential
Answer: outcomes
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Prioritizing Systems and Functions for Recovery
Available Study Resources on Quizplus for this Chatper
21 Verified Questions
21 Flashcards
Source URL: https://quizplus.com/quiz/44517
Sample Questions
Q1) One function that is often overlooked during recovery is __________.
A)payroll
B)disaster assessment
C)accounts receivable
D)backup
Q2) Which category does the payroll system likely fall into?
A)tier 1 systems
B)tier 2 systems
C)tier 3 systems
D)tier 4 systems
Q3) The disaster recovery team must consider the impact from any __________ in the data that may occur between the time of the backup and the end of local processing.
Q4) Once you have determined the assets as well as processes and functions of an organization,it is time to determine what _____________ is assigned to each of the different aspects so that the organization can recover its business.
Q5) The web site Answers.com defines __________ as "the entries on a balance sheet showing all properties,both tangible and intangible,and claims against others that may be applied to cover the liabilities of a person or business."
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Identify Data Storage and Recovery Sites
Available Study Resources on Quizplus for this Chatper
23 Verified Questions
23 Flashcards
Source URL: https://quizplus.com/quiz/44518
Sample Questions
Q1) The data or documentation that is necessary for normal daily operations of the organization but for which there are alternative sources of the same data or data that can be easily reconstructed is known as ________________.
Q2) What is an advantage to using on site climate-controlled,fireproof,waterproof,and even tornado-proof safes?
A)Lessens the risk of the tapes being damaged in a disaster
B)Allows for rapid access by the organization when necessary
C)Guarantees the chain of custody and minimizes the points of access to the data
D)All of the above
Q3) The site,regardless of where it is or what it provides,will require a significant outlay of money.But the organization needs to look at this more as __________ than as a sunk cost.
Q4) Reciprocal agreements are often a viable and useful alternative to a __________ recovery site.
A)hot
B)warm
C)cold
D)All of the above
Q5) __________ failure often goes undetected for extended periods of time.
To view all questions and flashcards with answers, click on the resource link above. Page 7
Chapter 6: Developing Plans, Procedures, and Relationships
Available Study Resources on Quizplus for this Chatper
23 Verified Questions
23 Flashcards
Source URL: https://quizplus.com/quiz/44519
Sample Questions
Q1) It is important that all discussions and interviews be __________ so that they can be incorporated into what will evolve into the disaster recovery plan.
Q2) Which of the following should be included in the list of contacts in a disaster recovery plan?
A)computer vendor
B)emergency services
C)customers
D)all of the above
Q3) Not only do you need to make plans for you upstream partners,you also need to take into account your downstream relationships,which are your __________.
Q4) No matter how many scenarios and situations may be included,it is likely that one or more will be__________.
Q5) Which of the following is an example of an upstream relationship?
A)clients
B)suppliers
C)competitors
D)all of the above
Q6) It is important to remember that the recovery plan is a(n)__________ document.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Developing Procedures for Special Circumstances
Available Study Resources on Quizplus for this Chatper
20 Verified Questions
20 Flashcards
Source URL: https://quizplus.com/quiz/44520
Sample Questions
Q1) It is important that the organization have support contracts with the ___________ should it become necessary to relocate the disaster recovery effort to another location.
Q2) Which of the following is a disaster recovery risk?
A)Everyone is in an unfamiliar location.
B)People are likely to be less mindful of security precautions if they are different than those at the primary work location.
C)The recovery will be performed on different systems than everyone is used to dealing with.
D)All of the above .
Q3) Which of the following is the best test scenario?
A)The recovery team is notified one week in advance of a disaster drill.
B)The recovery team is not sure if the situation is a drill or an actual disaster.
C)The recovery team is awakened in the middle of the night to initiate a disaster drill.
D)The recovery team knows the dates of disaster drills which are scheduled twice a year.
Q4) __________ can happen at any time,even when you're already in the midst of one.
To view all questions and flashcards with answers, click on the resource link above.
Page 9
Chapter 8: Testing the Disaster Recovery Plan
Available Study Resources on Quizplus for this Chatper
25 Verified Questions
25 Flashcards
Source URL: https://quizplus.com/quiz/44521
Sample Questions
Q1) Which of the following is a reason for testing the disaster recovery plan?
A)determine the feasibility and compatibility of backup facilities and procedures
B)identify areas of the plan that need modification
C)provide training to the team managers and team members on how to recover the organization from a disaster
D)all of the above
Q2) To work effectively as a team,recovery drills need to occur and __________ need to be taken so everyone can learn from what has been done.
Q3) It is vital to the organization and the success of the disaster recovery plan that the plan be thoroughly tested on a(n)__________ basis.
A)weekly
B)monthly
C)annual
D)bi-annual
Q4) The smaller the company the __________ likely it will be that change control will be applied to the disaster recovery document when new software or hardware is acquired or retired.
To view all questions and flashcards with answers, click on the resource link above.
Chapter 9: Continued Assessment of Needs, Threats, and Solutions
Available Study Resources on Quizplus for this Chatper
21 Verified Questions
21 Flashcards
Source URL: https://quizplus.com/quiz/44522
Sample Questions
Q1) Which threat analysis involves the use of backdoors?
A)Discoverable
B)Users/Systems Affected
C)Exploitable
D)Reproducible.
Q2) What usually follows the fact-finding meetings which follow a recovery,whether drill or real?
A)changes to the recovery plan
B)a completely new recovery plan
C)blame for failure is assigned as needed
D)a walk-through test
Q3) It may even be to an organization's benefit to schedule at least _________ dedicated to finding all the places where the system can be broken.
A)one recovery meeting that is
B)two recovery meetings that are
C)one test cycle that is
D)two test cycles that are
Q4) The meetings about changes that need to be made should occur as soon as possible __________ the recovery test.
To view all questions and flashcards with answers, click on the resource link above. Page 11