Revision Questions

1. What is the primary objective of a risk management program?
   1. To protect the IT assets
   2. To implement preventive controls
   3. To achieve the stated objectives
   4. To ensure the availability of IT systems
2. Which of the following vulnerabilities will allow attackers to access data through a web application?
   1. Validation checks are missing in data input fields
   2. The password history rule is not implemented
   3. Application logs are not monitored at frequent intervals
   4. Two-factor authentication is not implemented
3. The best way to understand the evolving nature of attacks is:
   1. To place a honeypot
   2. A rogue access point
   3. Industry tracking groups
   4. Penetration test
4. A previously accepted risk:
   1. Should be reassessed on a periodic basis as risks change over time
   2. Does not need to be assessed again in the future
   3. Should be removed from the risk register
   4. Should be mitigated in the next assessment
5. A security manager notes an incident though none of the controls have failed. What is the most likely cause...