Site MapHelpFeedbackMultiple Choice Quiz
Multiple Choice Quiz
(See related pages)



1

The process of subjectively determining the impact of an event that affects a project, program, or business is called ____.
A)countermeasure
B)qualitative risk assessment
C)quantitative risk assessment
D)safeguard
2

The monetary loss or impact of each occurrence of a threat is called ____.
A)annualized loss expectancy
B)annualized rate of occurrence
C)qualitative risk assessment
D)single loss expectancy
3

Which of the following risks is NOT an example of a technology risk?
A)Business continuity management
B)Environmental risk management
C)Information technology asset management
D)Project risk management
4

Which of the following events is a threat?
A)Equipment or software failure
B)Insufficient controls and procedures
C)Unprotected computer systems
D)Unprotected facilities
5

Risks that remain after implementing controls are called ____.
A)impacts
B)residual risks
C)threats
D)vulnerabilities
6

Which analysis tool identifies relationships between a risk and the factors causing it?
A)Affinity grouping
B)Baseline identification
C)Cause and effect analysis
D)Cost/benefit analysis
7

Breach of confidence can be classified as a(n) ____.
A)intangible impact
B)residual risk
C)tangible impact
D)vulnerability
8

The possibility of suffering harm or loss is known as a(n) ____.
A)impact
B)risk
C)threat
D)value
9

The resource or information that an organization needs to conduct business is called its ____.
A)asset
B)impact
C)value
D)vulnerability
10

Inventory, buildings, and cash are examples of ____.
A)assets
B)risks
C)threats
D)vulnerabilities





To learn more about the book this website supports, please visit its Information Center.
(c)2005 McGraw-Hill Higher Education
Any use is subject to the Terms of Use and Privacy Policy.
McGraw-Hill Higher Education is one of the many fine businesses of The McGraw-Hill Companies.


Security+ and BeyondOnline Learning Center

Home > Chapter 20 > Multiple Choice Quiz