READ Free Dumps For
Warning: Undefined variable $vendor in /home1/bandbozu/getfreedumps.com/quiz.php on line 141
-
Warning: Undefined variable $exam_number in /home1/bandbozu/getfreedumps.com/quiz.php on line 141

Question ID 16953	A risk management approach to information protection is:
Option A	managing risks to an acceptable level, commensurate with goals and objectives.
Option B	accepting the security posture provided by commercial security products.
Option C	implementing a training program to educate individuals on information protection and risks.
Option D	managing risk tools to ensure that they assess all information protection vulnerabilities.
Correct Answer	A

Explanation Explanation: Risk management is identifying all risks within an organization, establishing an acceptable level of risk and effectively managing risks which may include mitigation or transfer. Accepting the security- posture provided by commercial security products is an approach that would be limited to technology components and may not address all business operations of the organization. Education is a part of the overall risk management process. Tools may be limited to technology and would not address non-technology risks.

Question ID 16954	Risk assessment is MOST effective when performed:
Option A	at the beginning of security program development.
Option B	on a continuous basis.
Option C	while developing the business case for the security program.
Option D	during the business change process.
Correct Answer	B

Explanation Explanation: Risk assessment needs to be performed on a continuous basis because of organizational and technical changes. Risk assessment must take into account all significant changes in order to be effective.

Previous-Page 1 2... 69 70 71 72 73 74 75 76 77 Next-Page

Send email to admin@getfreedumps for new dumps request!!!