Risk Management Frameworks Quiz

5 questions Pass: 70% +25 pts (50 with Pro)

Quiz covering Risk and Continuity

What you'll be asked

  1. Which component of the NIST Risk Management Framework (RMF) involves selecting the appropriate security controls for an information system?
  2. In the context of business continuity, what is the primary purpose of a Business Impact Analysis (BIA)?
  3. When applying the ISO/IEC 27001 framework, what is the core objective of the 'Risk Treatment' phase?
  4. A network administrator is evaluating the Recovery Time Objective (RTO) and Recovery Point Objective (RPO) for a database. If the database must be restored to a state no older than 1 hour, which metric is being defined?
  5. An organization is transitioning from a compliance-based security posture to a risk-based posture using the FAIR (Factor Analysis of Information Risk) framework. What is the primary output of a FAIR analysis?

Answers and explanations come after you submit.