- (Exam Topic 2)
The MOST significant benefit of using a consistent risk ranking methodology across an organization is that it enables:

1. A. allocation of available resources
2. B. clear understanding of risk levels
3. C. assignment of risk to the appropriate owners
4. D. risk to be expressed in quantifiable terms

Correct Answer: B

- (Exam Topic 4)
Which of the following situations presents the GREATEST challenge to creating a comprehensive IT risk profile of an organization?

1. A. Manual vulnerability scanning processes
2. B. Organizational reliance on third-party service providers
3. C. Inaccurate documentation of enterprise architecture (EA)
4. D. Risk-averse organizational risk appetite

Correct Answer: D

- (Exam Topic 2)
Which of these documents is MOST important to request from a cloud service provider during a vendor risk assessment?

1. A. Nondisclosure agreement (NDA)
2. B. Independent audit report
3. C. Business impact analysis (BIA)
4. D. Service level agreement (SLA)

Correct Answer: B

- (Exam Topic 4)
Which of the following BEST balances the costs and benefits of managing IT risk*?

1. A. Prioritizing and addressing risk in line with risk appetit
2. B. Eliminating risk through preventive and detective controls
3. C. Considering risk that can be shared with a third party
4. D. Evaluating the probability and impact of risk scenarios

Correct Answer: A

- (Exam Topic 2)
Which of the following is the BEST way to identify changes in the risk profile of an organization?

1. A. Monitor key risk indicators (KRIs).
2. B. Monitor key performance indicators (KPIs).
3. C. Interview the risk owner.
4. D. Conduct a gap analysis

Correct Answer: D