Exam 15: Risk Mitigation

List and describe three of the six risk categories.

Which threat category impacts the daily business of the organization?

What term best describes the ability to continue to function as the size or volume of the enterprise data center expands to meet the growing demands?

Select the option that best describes an asset:

What type of learner learns best through hands-on approaches?

What is a service contract between a vendor and a client that specifies what services will be provided,the responsibilities of each party,and any guarantees of service?

Which term below describes the art of helping an adult learn?

Which of the following refers to the start-up relationship between partners?

What is the name for a framework and corresponding functions required to enable incident response and incident handling within an organization?

What kind of policy defines the actions users may perform while accessing systems and networking equipment?

Risk avoidance involves identifying the risk and making the decision to engage in the activity.

What is a security control?

Generally considered to be the most important information security policies,what item below defines the actions a user may perform while accessing systems and networking equipment?

What specific type of mechanism should be utilized by all types of training to provide input from participants on the training's effectiveness so that any needed modifications can be made for future training?

Which threat category affects the long-term goals of the organization?

Which of the following is an agreement that is intended to minimize security risks for data transmitted across a network?

What type of control is designed to provide an alternative to normal controls that for some reason cannot be used.?

What type of risk calculation uses an "educated guess" based on observation?

A subject's privilege over an object should follow the principle of least privilege.

Explain the concept of change management.