Quiz1 - 1 QUESTION 1 A would be a misconfiguration of a...

QUESTION 1
1. A ____________ would be a misconfiguration of a system that allows the
hacker to gain unauthorized access, whereas a______________ is a combination
of the likelihood that such a misconfiguration could happen, a hacker’s
exploitation of it, and the impact if the event occurred.
vulnerability,
risk
risk,
vulnerability
threat, risk
risk, threat
QUESTION 2
1. As employees find new ways to improve a system or process, it is
important to have a way to capture their ideas. ________________________ can be
understood as finding a better way or as a lesson learned.
QUESTION 3
1. Generally, regardless of threat or vulnerability, there will ____________
be a chance a threat can exploit a vulnerability.
QUESTION 4
1. In the Build, Acquire, and Implement domain, the ability to manage
change is very important. Thus, there are often ___________________ set to
avoid disrupting current services while new services are added.

guidelines
QUESTION 5
1. When an organization lacks policies, its operations become less
predictable. Which of the following is a challenge you can expect without
policies?
lower costs
increased regulatory
compliance
customer dissatisfaction
low retention rates for
employees
QUESTION 6
1. A good security awareness program makes employees aware of the
behaviors expected of them. All security awareness programs have two
enforcement components: the carrot and the stick. Which of the following best
captures the relationship of the two components?