2026 RISK MANAGEMENT AND
INFORMATION SYSTEMS COMPLETE STUDY
GUIDE AND SOLUTIONS
◉ True or False? Malware cannot threaten the Workstation Domain
of a typical IT security infrastructure if the other domains are
secure.
Answer: false
◉ Which of the following is often the weakest link in IT security?
a. people
b. use of passphrases
c. physical security
d. use of computer firewalls
Answer: a. people
◉ ________ are acts that are hostile to an organization.
a. intentional threats
b. unintentional threats
, c. human threats
d. all threats
Answer: a. intentional threats
◉ A(n) _______ is the likelihood that something unexpected is going to
occur.
a. risk
b. threat
c. exploit
d. vulnerability
Answer: a. risk
◉ True or False? There is no difference between power of attorney
and general power of attorney.
Answer: false
◉ True or False? The scope identifies the boundaries of a risk
management plan.
Answer: true
◉ Which of the following best describes the purpose of the Health
Insurance Portability and Accountability Act (HIPAA)?
a. it helps to protect health information