Chapter 2

Question 1

SECURITY’S PRIMARY OBJECTIVE IS TO?

Answer 1

MANAGE RISKS BY BALANCING THE COST OF PROTECTION MEASURES TO THE BENEFIT OF THOSE MEASURES

Question 2

THERE ARE SIX STEPS IN THE RISK ASSESSMENT PROCESS, NAME THEM

Answer 2

1. IDENTIFY AND VALUE ASSESTS
2. IDENTIFY THREATS
3. DETERMINE THE VULNERABILITIES
4. IMPACT OF A LOSS EVENT
5. ANALYSIS AND PRIORITIZATION
6. MITIGATION BASELINE APPROACH

Question 3

ASSESTS CAN BE CATEGORIZED INTO THREE CATEGORIES NAME THEM

Answer 3

1. TANGIBLE
2. INTANGIBLE
3. MIXED

Question 4

ASSETS CAN BE VALUED USING TWO METHODS NAME THEM

Answer 4

1. RELATIVE VALUE

2. COST OF LOSS FORMULA

Question 5

THREATS CAN BE CHARACTERIZED AS (3 THINGS)

Answer 5

1. NATURAL
2. INTENTIONAL
3. INADVERTENT

Question 6

WHAT IS A VULNERABILITY?

Answer 6

IT’S A GAP OR WEAKNESS THAT ALLOWS A THREAT TO COMPROMISE AN ASSET OR FUNCTION

Question 7

WHICH ALLOWS THE ORGANIZATION SOME LEVEL OF CONTROL, A THREAT OR VULNERABILITLY ?

Answer 7

VULNERABILITY

Question 8

IMPACT IS USUALLY MEASURED IN ?

Answer 8

FINANCIAL TERMS

Question 9

ANALYZING RISK CAN BE ACHIEVED IN 2 STEPS ?

Answer 9

1. CALCULATION OF IMPACT

2. PRIORITIZATING THE IDENTIFIED RISKS

Question 10

ONE APPROACH TO DETERMINING RISK RESULTS USES A BASIC RISK FORMULA WHAT IS IT ?

Answer 10

(THREAT X VULNERABILITY X IMPACT) 1/3 = RISK

Question 11

DETERMINING MITIGATION MEASURES CAN BE DONE USING 4 STEPS

Answer 11

1. SELECT
2. TEST
3. IMPLEMENT
4. TRAIN

Question 12

WHATS THE DIFFERENCE BETWEEN QUALITATIVE AND QUANTITATIVE ASSESSMENTS?

Answer 12

QUALITATIVE USES A GENERAL RANGE

QUANTITATIVE USES SPECIFIC NUMERICAL VALUES

Question 13

WHAT ARE THE 5 METHODS OF ADDRESSING RISK

Answer 13

1. RISK AVOIDANCE
2. RISK SPREADING
3. RISK TRANSFER
4. RISK REDUCTION
5. COMBINATION OF ANY OR ALL

Question 14

WHAT IS A SECURITY SURVEY?

Answer 14

IT’S A THOROUGH EXAM OF A FACILITY, ITS OPERATIONS, SYSTEMS, AND PROCEDURES

Question 15

A COST BENEFIT ANALYSIS TYPICALLY CONSISTS OF 3 FACTORS

Answer 15

1. COST
2. RELIABILITY
3. DELAY

Question 16

WHAT ARE THREE SURVEY APPROACHES

Answer 16

1. OUTSIDE-IN
2. INSIDE-OUT
3. FUNCTIONAL

Question 17

A SWOT ANALYSIS FOCUSES ON WHAT 4 THINGS

Answer 17

1. STRENGTHS
2. WEAKNESSES
3. OPPORTUNITIES
4. THREATS

Question 18

WHAT ARE 5 CRITERIA OF A SECURITY REPORT?

Answer 18

1. ACCURATE
2. CLARITY
3. CONCISE
4. TIMELINESS
5. CONSIDER SLANT OR PITCH

Question 19

WHAT ARE 4 THINGS THAT AUTOMATED TOOLS ARE GOOD AT ?

Answer 19

PROCESSING, ANALYZING, COMPARING, STORING LARGE AMOUNTS OF DATA

Question 20

WHAT IS 1 THING THAT AN AUTOMATED TOOL IS NOT GOOD AT ?

Answer 20

ASSESSING THE INTANGIBLE FACTORS IN THE ASSESSMENT PROCESS