MULTIPLE CHOICE QUESTIONS DETAILED SOLVED
SOLUTIONS VERIFIED ANSWERS LATEST UPDATED
STUDY GUIDE FULLY GRADED A PLUS
GUARANTEED PASS
Which of the following would be considered an external risk factor?
a. Supply chain for goods and services
b. Disgruntled employees
c. Employee drug screening
d. Clean desk policy procedures - CORRECT ANSWER-A
Which of the following would be considered a control?
a. Loss of access to facilities
b. A tornado
c. Lack of fire suppression systems
d. UPS/generators - CORRECT ANSWER-D
,Determining cyber threats to the entity is part of the:
a. Business continuity plan
b. Disaster recovery plan
c. Business impact analysis
d. Risk assessment - CORRECT ANSWER-D
Which of the following is an objective of a business impact analysis?
a. To calculate the probability of disruptions to the entity
b. To evaluate the effectiveness of existing controls and safeguards
c. To identify and prioritize the recovery of an entity's functions
and processes
d. To develop preparations and procedures for responding to a
disaster - CORRECT ANSWER-C
Which of the following is an example of a qualitative impact? a. Loss
of sales
b. Loss of reputation
, c. Loss of revenue due to penalties
d. Extra expense - CORRECT ANSWER-B
Which of the following is an example of a quantitative impact? a.
Lower level of customer service
b. A disruption of quality assurance
c. Loss of sales
d. Lower employee morale - CORRECT ANSWER-C
Which of the following is NOT a result of conducting a business
impact analysis?
a. Identifies all essential entity functions and operations and their
critical dependencies
b. Determines when the exposures and impacts begin and how they
escalate over time
c. Identifies the technology and workspace needs as well as
potential unbudgeted expenses