CERTIFIED-IN-CYBERSECURITY · Question #121
When analyzing risks, which of these activities is required? ()
The correct answer is D. Determining the likelihood of occurrence of a set of risks. Risk analysis is the process of identifying, estimating, and prioritizing risks. A core mandatory step is determining the likelihood (probability) that each identified risk will materialize, because without likelihood, you cannot calculate risk magnitude (Risk = Likelihood ×…
Question
When analyzing risks, which of these activities is required? ()
Options
- ASelecting the appropriate controls
- BIdentifying risks associated with loss of confidentiality
- CAccepting all evaluated risks
- DDetermining the likelihood of occurrence of a set of risks
How the community answered
(22 responses)- A5% (1)
- C5% (1)
- D91% (20)
Explanation
Risk analysis is the process of identifying, estimating, and prioritizing risks. A core mandatory step is determining the likelihood (probability) that each identified risk will materialize, because without likelihood, you cannot calculate risk magnitude (Risk = Likelihood × Impact). Option A (selecting controls) is part of risk treatment, which comes after analysis. Option C (accepting all risks) is never required-risk acceptance is just one possible response alongside mitigation, transfer, or avoidance. Option B (identifying confidentiality risks) is part of threat identification but is narrower than the full scope of risk analysis, which covers all risk types including integrity and availability.
Topics
Community Discussion
No community discussion yet for this question.