TRUE/FALSE
1. A control classified as preventative has to be known by aperson in order to be effective.
2. For an intangible impact, assigning a financial value of theimpact is easy.
3. All risks need to be mitigated or controlled.
Multiple choice
4. Which term refers to the possibility of suffering harm orloss?
A. Risk
B. Hazard
C. Threat vector
D. Threat actor
5. Which action is an example of transferring risk?
A. Management purchases insurance for the occurrence of therisk.
B. Management applies controls that reduce the impact of anattack.
C. Management has decided to accept responsibility for the riskif it does happen.
D. Management has decided against deploying a module thatincreases risk.
6.
OR
OR