- (Exam Topic 3)
Legal and regulatory risk associated with business conducted over the Internet is driven by:

1. A. the jurisdiction in which an organization has its principal headquarters
2. B. international law and a uniform set of regulations.
3. C. the laws and regulations of each individual country
4. D. international standard-setting bodies.

Correct Answer: C

- (Exam Topic 2)
Which of the following is the MOST important data attribute of key risk indicators (KRIs)?

1. A. The data is measurable.
2. B. The data is calculated continuously.
3. C. The data is relevant.
4. D. The data is automatically produced.

Correct Answer: C

- (Exam Topic 3)
Which of the following BEST enables a risk practitioner to enhance understanding of risk among stakeholders?

1. A. Key risk indicators (KRIs)
2. B. Risk scenarios
3. C. Business impact analysis (BIA)
4. D. Threat analysis

Correct Answer: B

- (Exam Topic 4)
Which of the following would BEST facilitate the implementation of data classification requirements?

1. A. Assigning a data owner
2. B. Implementing technical control over the assets
3. C. Implementing a data loss prevention (DLP) solution
4. D. Scheduling periodic audits

Correct Answer: A

- (Exam Topic 4)
Which of the following is the BEST way to validate whether controls to reduce user device vulnerabilities have been implemented according to management's action plan?

1. A. Survey device owners.
2. B. Rescan the user environment.
3. C. Require annual end user policy acceptance.
4. D. Review awareness training assessment results

Correct Answer: B