- (Exam Topic 3)
The BEST metric to demonstrate that servers are configured securely is the total number of servers:

1. A. exceeding availability thresholds
2. B. experiencing hardware failures
3. C. exceeding current patching standards.
4. D. meeting the baseline for hardening.

Correct Answer: D

- (Exam Topic 3)
Which of the following is the MOST effective way to integrate risk and compliance management?

1. A. Embedding risk management into compliance decision-making
2. B. Designing corrective actions to improve risk response capabilities
3. C. Embedding risk management into processes that are aligned with business drivers
4. D. Conducting regular self-assessments to verify compliance

Correct Answer: A

- (Exam Topic 1)
Which of the following BEST provides an early warning that network access of terminated employees is not being revoked in accordance with the service level agreement (SLA)?

1. A. Updating multi-factor authentication
2. B. Monitoring key access control performance indicators
3. C. Analyzing access control logs for suspicious activity
4. D. Revising the service level agreement (SLA)

Correct Answer: B

- (Exam Topic 2)
Which of the following can be interpreted from a single data point on a risk heat map?

1. A. Risk tolerance
2. B. Risk magnitude
3. C. Risk response
4. D. Risk appetite

Correct Answer: B

- (Exam Topic 3)
When evaluating enterprise IT risk management it is MOST important to:

1. A. create new control processes to reduce identified IT risk scenarios
2. B. confirm the organization’s risk appetite and tolerance
3. C. report identified IT risk scenarios to senior management
4. D. review alignment with the organization's investment plan

Correct Answer: B