CAS-005 · Question #148
An analyst wants to conduct a risk assessment on a new application that is being deployed. Given the following information: - Total budget allocation for the new application is unavailable…
The correct answer is B. Sufficient metrics are not available to conduct other risk assessment types. A qualitative risk assessment is appropriate when quantitative data such as budget, downtime costs, or RTOs are unavailable. It relies on expert judgment, likelihood, and impact categories rather than precise metrics, making it the best option in this scenario.
Question
An analyst wants to conduct a risk assessment on a new application that is being deployed. Given the following information:
- Total budget allocation for the new application is unavailable.
- Recovery time objectives have not been set.
- Downtime loss calculations cannot be provided.
Which of the following statements describes the reason a qualitative assessment is the best option?
Options
- AThe analyst has previous work experience in application development.
- BSufficient metrics are not available to conduct other risk assessment types.
- CAn organizational risk register tracks all risks and mitigations across business units.
- DThe organization wants to find the monetary value of any outages.
How the community answered
(59 responses)- A2% (1)
- B88% (52)
- C3% (2)
- D7% (4)
Explanation
A qualitative risk assessment is appropriate when quantitative data such as budget, downtime costs, or RTOs are unavailable. It relies on expert judgment, likelihood, and impact categories rather than precise metrics, making it the best option in this scenario.
Community Discussion
No community discussion yet for this question.