Qwissit Cybersecurity

ISC2 CC

Risk Management and Controls

12 of 60 questions in the app

Risk terms

  1. What is a vulnerability? Easy
  2. What is a threat? Easy
  3. What is called an asset in risk management? Easy
  4. Which two factors are usually used to assess a risk? Easy

Risk treatment

  1. A company takes out cyber insurance. Which risk strategy is this? Easy
  2. A company drops a planned online shop because the risk seems too high. Which strategy is this? Easy
  3. A company installs a firewall to reduce the likelihood of an attack. Which strategy is this? Easy
  4. When does it make sense to accept a risk? Easy

Risk terms

  1. Which statements about the relationship between threat, vulnerability and risk are correct? Medium
  2. What is inherent risk? Medium

Risk management process

  1. A laptop theft causes 5,000 euros of damage each time and happens four times a year on average. Disk encryption would reduce the damage to 1,000 euros per case and costs 6,000 euros per year. What does the calculation show? Hard
  2. Flood damage to the data center would cost 2 million euros and statistically occurs once in 50 years. What is the ALE? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications