GSNA Question #99: Real Exam Question with Answer & Explanation

The correct answer is B. They are considered an indicator of threats coupled with vulnerability. C. They can be mitigated by reviewing and taking responsible actions based on possible risks. D. They can be analyzed and measured by the risk analysis process.. In information security, security risks are considered an indicator of threats coupled with vulnerability. In other words, security risk is a probabilistic function of a given threat agent exercising a particular vulnerability and the impact of that risk on the organization. Secu

Question

Which of the following statements are true about security risks? (Choose three)

Options

AThey can be removed completely by taking proper actions.
BThey are considered an indicator of threats coupled with vulnerability.
CThey can be mitigated by reviewing and taking responsible actions based on possible risks.
DThey can be analyzed and measured by the risk analysis process.

Explanation

In information security, security risks are considered an indicator of threats coupled with vulnerability. In other words, security risk is a probabilistic function of a given threat agent exercising a particular vulnerability and the impact of that risk on the organization. Security risks can be mitigated by reviewing and taking responsible actions based on possible risks. These risks can be analyzed and measured by the risk analysis process. Answer: A is incorrect. Security risks can never be removed completely but can be mitigated by taking proper actions.

Community Discussion

No community discussion yet for this question.

Full GSNA Practice