Midterm2.docx - Question 1 1 out of 1 points(sometimes...


 Question 1
1 out of 1 points
____ (sometimes referred to as avoidance) is the risk control strategy that attempts to
prevent the exploitation of a vulnerability.
 Question 2
1 out of 1 points
A(n) ____ is any clearly identified attack on the organization’s information assets that
would threaten the assets’ confidentiality, integrity, or availability.
 Question 3
1 out of 1 points
The ____ illustrates the most critical characteristics of information and has been the
industry standard for computer security since the development of the mainframe.
 Question 4
1 out of 1 points
A(n) ____ is an object, person, or other entity that is a potential risk of loss to an asset.
 Question 5
1 out of 1 points
____ assigns a risk rating or score to each information asset. Although this number

does not mean anything in absolute terms, it is useful in gauging the relative risk to
each vulnerable information asset and facilitates the development of comparative
ratings later in the risk control process.
 Question 6
0 out of 1 points
A(n) ____ is used to anticipate, react to, and recover from events that threaten the
security of information and information assets in an organization; it is also used to
restore the organization to normal modes of business operations;
 Question 7
1 out of 1 points
____ is a risk control approach that attempts to shift the risk to other assets, other
processes, or other organizations.
 Question 8
1 out of 1 points
A ____ deals with the preparation for and recovery from a disaster, whether natural or
man-made.
 Question 9
1 out of 1 points
A ____ attack seeks to deny legitimate users access to services by either tying up a
server’s available resources or causing it to shut down.

 Question 10
1 out of 1 points
The last stage of a business impact analysis is prioritizing the resources associated
with the ____, which brings a better understanding of what must be recovered first.