IT Risk Management Exam Solutions
Course Introduction
IT Risk Management explores the principles, frameworks, and practices essential to identifying, assessing, and mitigating risks associated with information technology systems. This course covers various types of IT risks including cybersecurity threats, data breaches, operational disruptions, and compliance failures and examines methodologies for risk assessment, treatment, and monitoring. Students learn to develop risk management plans, apply relevant standards and regulations, and implement controls to protect digital assets. Through case studies and practical exercises, learners gain proficiency in evaluating IT environments, responding to incidents, and ensuring business continuity in the face of evolving technological threats.
Recommended Textbook Principles of Incident Response and Disaster Recovery 1st Edition by Michael E. Whitman
Available Study Resources on Quizplus
11 Chapters
549 Verified Questions
549 Flashcards
Source URL: https://quizplus.com/study-set/2243 Page 2
Chapter 1: Contingency Planning Within Information
Security
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44623
Sample Questions
Q1) Once the project team for information security development creates a ranked vulnerability worksheet,the team must choose one of four basic strategies to control each of the risks that result from these vulnerabilities.List the four strategies.
Answer: The four strategies are as follows: Apply safeguards that eliminate or reduce the remaining uncontrolled risks for the vulnerability (avoidance). Transfer the risk to other areas or to outside entities (transference). Reduce the impact should the vulnerability be exploited (mitigation). Understand the consequences and accept the risk without control or mitigation (acceptance).
Q2) What is difference between access control lists and configuration rules?
Answer: Access control lists (ACLs): Lists,matrices,and capability tables governing the rights and privileges of a particular user to a particular system.
Configuration rules: The specific configuration codes entered into security systems to guide the execution of the system when information is passing through it.
To view all questions and flashcards with answers, click on the resource link above.
3
Chapter 2: Planning for Organizational Readiness
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44624
Sample Questions
Q1) The blackmail of an organization for information assets is an example of a(n)____.
A)deliberate act of sabotage
B)act of human error
C)deliberate act of trespass
D)deliberate act of information distortion
Answer: D
Q2) The ____ job functions focus more on costs of system creation and operation,ease of use for system users,and timeliness of system creation,as well as transaction response time.
A)information technology management and professionals
B)organizational management and professionals
C)information security management and professionals
D)human resource management and professional
Answer: A
Q3) The organization's level of preparedness directly influences the probability of a successful attack.
A)True
B)False
Answer: True
To view all questions and flashcards with answers, click on the resource link above.
Page 4
Chapter 3: Incidence Response: Preparation, Organization, and Prevention
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44625
Sample Questions
Q1) A(n)____________________ team should be available for contact by anyone who discovers or suspects that an incident involving the organization has occurred.
Answer: incident response
Q2) The IR policy must gain the full support of top management and be clearly understood by all affected parties.
A)True
B)False
Answer: True
Q3) A(n)____ is a detailed examination of the events that occurred from first detection to final recovery.
A)after-action review
B)reactive review
C)proactive review
D)audit review
Answer: A
Q4) The performance of ____________________ services directly reduces the number of incidents in the future.
Answer: proactive
To view all questions and flashcards with answers, click on the resource link above. Page 5
Chapter 4: Incident Response: Detection and Decision Making
Available Study Resources on Quizplus for this Chatper
49 Verified Questions
49 Flashcards
Source URL: https://quizplus.com/quiz/44626
Sample Questions
Q1) ____ are tools used to identify which computers are active on a network,as well as which ports and services are active on the computers,what function or role the machines may be fulfilling,and so on.
A)Triggers
B)Clusters
C)Scanning utilities
D)Filters
Q2) A(n)____________________ monitors traffic on a segment of an organization's network.
Q3) The task of monitoring file systems for unauthorized change is best performed by using a(n)____.
A)cache
B)honeypot
C)SPAN
D)HIDS
Q4) A(n)____________________ can adapt its reaction activities based on both guidance learned over time from the administrator as well as circumstances present in the local environment.
Q5) List five reasons why you would acquire and use an IDS.
To view all questions and flashcards with answers, click on the resource link above. Page 6
Chapter 5: Incidence Response: Reaction, Recovery, and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44627
Sample Questions
Q1) The ____ investigates crimes involving U.S.currency,counterfeiting,and certain cases involving credit card fraud and identity theft.
A)FBI
B)U.S.Secret Service
C)U.S.Treasury Department
D)CIA
Q2) What conditions must be met before a private organization can search an employee's computer?
Q3) The first step in acquiring computer evidence is the establishment of ____ procedures.
A)search and seizure
B)after-action
C)incidence response
D)disaster recovery
Q4) What are the key steps in the Protect and Forget reaction strategy?
Q5) Once an incident has been contained,and system control has been regained,incident ____________________ can begin.
Q6) List five incident containment strategies.
7
Q7) What are the steps involved in analyzing evidentiary material?
To view all questions and flashcards with answers, click on the resource link above.
Chapter 6: Contingency Strategies for Business
Resumption Planning
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44628
Sample Questions
Q1) The usage of _________________________________ systems can overcome some of the limits of magnetic tape backup systems,and,as seen later in the section titled "Real-Time Protection,Server Recovery,and Application Recovery," RAID systems provide enhanced capabilities.
Q2) ____ is the storage of duplicate online transaction data,along with the duplication of the databases at the remote site to a redundant server.
A)Remote journaling
B)Electronic vaulting
C)Hot swapping
D)Database shadowing
Q3) List five sections that should be included in a service agreement.
Q4) The ____ method of backup uses five media sets <i>per week </i>and allows recovery of data for the previous three weeks.
A)Towers of Hanoi
B)six-tape rotation
C)Grandfather-Father-Son
D)six-day rotation
Q5) Discuss the six step process of the Grandfather-Father-Son backup method.
Q6) A variation of mirroring is called ____________________.
To view all questions and flashcards with answers, click on the resource link above. Page 8
Chapter 7: Disaster Recovery: Preparation and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44629
Sample Questions
Q1) ____ is the process of systematically examining information assets for evidentiary material that can provide insight into how an incident transpired.
A)After-action review
B)Hashing
C)Forensics analysis
D)Clustering
Q2) List five contingency strategies that should be considered for LANs.
Q3) The ____ should contain the specific and detailed guidance and procedures for restoring lost or damaged capability.
A)forensic report
B)DR planning document
C)event schedule
D)contingency report
Q4) The ____________________ is a detailed examination of the events that occurred from first detection to final recovery.
Q5) List five practices for Web site contingency planning.
Q6) List five practices that should be considered when addressing server vulnerabilities.
Q7) List five strategies that should be considered for distributed systems.
To view all questions and flashcards with answers, click on the resource link above. Page 9
Chapter 8: Disaster Recovery: Operation and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44630
Sample Questions
Q1) Requires that a contact person call each and every person on the roster.
A)Storage recovery team
B)Vendor relationships
C)Testing
D)Alert roster
E)Sequential roster
F)Recovery phase
G)Resumption phase
H)Restoration phase
I)Data-management practices
Q2) Discuss the three primary goals of the disaster recovery plan.
Q3) ____ is a set of focused steps that deal primarily with the safety and state of the people from the organization who are involved in the disaster.
A)War gaming
B)Business continuity
C)Crisis management
D)Application recovery
Q4) The ____________________ phase involves activating the disaster recovery plan and following the steps outlined therein.
To view all questions and flashcards with answers, click on the resource link above. Page 10
Chapter 9: Business Continuity Preparation and Implementation
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44631
Sample Questions
Q1) Discuss five tips for effective BC planning.
Q2) What are the disadvantages of a time-share?
Q3) What are the responsibilities of the applications recovery team,the data management team,and the logistics team?
Q4) The term ____________________ is used in the military and government sectors to represent the process of moving out of temporary facilities and returning them to the owners or managers.
Q5) Provides only rudimentary services and facilities.
A)Disaster recovery
B)Business continuity
C)Hot site
D)Cold site
E)Service contracts
F)Remote journaling
G)System recovery team
H)Network team
I)Logistics team
Q7) What is the purpose of the business continuity program at the organization? Page 11
Q6) What is the difference between the recovery time objective and the recovery point objective?
To view all questions and flashcards with answers, click on the resource link above. Page 12
Chapter 10: Business Continuity Operations and Maintenance
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44632
Sample Questions
Q1) Works to establish short- and longterm networks,including the network hardware (hubs,switches,and routers)and wiring,and Internet and Intranet connectivity.
A)Trigger point
B)Preparation undertaken by an organization
C)Network recovery team
D)Security
E)Insurance
F)BC plan
G)BC review
H)Information systems security control
I)Plan
Q2) With respect to the continuity planning process,what is the importance of communication?
Q3) When implementing the BC plan,what preparations should be made for the BC action?
Q4) Implementation of the _________________________ plan occurs when the organization experiences a circumstance in which it cannot reasonably expect to return to normal operations at the primary site.
Page 13
Q5) What is the purpose of the BC review?
To view all questions and flashcards with answers, click on the resource link above.
Chapter 11: Crisis Management and Human Factors
Available Study Resources on Quizplus for this Chatper
50 Verified Questions
50 Flashcards
Source URL: https://quizplus.com/quiz/44633
Sample Questions
Q1) Seek to determine the ability of the employees to respond to a notification system,whether automated or manual.
A)Crisis management team
B)Head-counts
C)Critical success factors
D)The plan
E)First-level priority objectives
F)Alert roster tests
G)Tabletop exercise
H)PTSD
I)EAPs
Q2) ____ is defined as those actions taken by an organization in response to an emergency situation in an effort to minimize injury or loss of life.
A)Crisis management
B)Employee assistance
C)Cross-training
D)Job rotation
Q3) The challenge of preparing for ____________________ is in ensuring that employees do not feel that they are being prepared for termination.
To view all questions and flashcards with answers, click on the resource link above.
Page 14