IT-Risk-Fundamentals 無料問題集「ISACA IT Risk Fundamentals Certificate」

（A）Stakeholders are accountable for all risk management activities within an enterprise.

（B）Stakeholders set direction and provide support for risk management practices.

（C）Stakeholders are responsible for protecting enterprise assets to achieve business objectives.

（A）Monte Cado analysis

（B）Brainstorming model

（C）Delphi technique

（A）Maturity of risk management processes

（B）Severity of a vulnerability

（C）Cost of mitigating controls

（A）Collect information on the infrastructure of an organization to know where to attack.

（B）Use social engineering to encourage employees to visit an infected website.

（C）Identify administrators and crack passwords to obtain administrator access.

（A）Assurance is needed that the risk dashboard is complete and comprehensive.

（B）Overlooked or ignored risk may become relevant in the future.

（C）The risk report must contain the current state of all risk.

（A）Ease of promoting risk awareness with key stakeholders

（B）Clarity on the proper interpretation of reported risk

（C）Simplicity in translating risk reports into other languages

（A）Risk response activities that can be made more efficient

（B）Risk that has clearly identified and assigned ownership

（C）Risk remediation activities that have sufficient budget

（A）strategic risk.

（B）operational risk.

（C）market risk.

（A）An attacker takes advantage of a vulnerability

（B）Any event that is verified as a security breach

（C）The actual occurrence of an adverse event

（A）Risk analysis

（B）Risk governance

（C）Risk register