IT-Risk-Fundamentals 無料問題集「ISACA IT Risk Fundamentals Certificate」

（A）Security classification of assets

（B）Regulatory requirements of assets

（C）Loss scenario information for assets

（A）integrity risk.

（B）availability risk.

（C）relevance risk.

（A）When the goal is to produce results that can be compared over time

（B）When the goal is to prioritize risk response plans

（C）When the goal is to aggregate risk at the enterprise level

（A）return on investment (ROI) objectives are met.

（B）compliance with established standards is achieved.

（C）risk events are being fully mitigated.

（A）Vulnerability score

（B）Likelihood

（C）Threat level

（A）The likelihood of occurrence for most relevant risk scenarios

（B）The impact on competitors in the same industry

（C）The impact on the business services that the IT system supports

（A）An attacker takes advantage of a vulnerability

（B）Any event that is verified as a security breach

（C）The actual occurrence of an adverse event

（A）Threat mitigation

（B）Report size

（C）False positives

（A）Collect information on the infrastructure of an organization to know where to attack.

（B）Use social engineering to encourage employees to visit an infected website.

（C）Identify administrators and crack passwords to obtain administrator access.

（A）It promotes alignment with industry best practices for risk management.

（B）It provides a scheme for classifying categories of risk.

（C）It enables risk quantification.