CAP ISC2 Exam Questions and Free Practice Test

Question 79

Risks with low ratings of probability and impact are included on a ____ for future monitoring.

A. Watchlist

B. Risk alarm

C. Observation list

D. Risk register

Correct Answer:A

Question 80

James work as an IT systems personnel in SoftTech Inc. He performs the following tasks: Runs regular backups and routine tests of the validity of the backup data.
Performs data restoration from the backups whenever required.
Maintains the retained records in accordance with the established information classification policy.
What is the role played by James in the organization?

A. Manager

B. Owner

C. Custodian

D. User

Correct Answer:C

Question 81

Elizabeth is a project manager for her organization and she finds risk management to be very difficult for her to manage. She asks you, a lead project manager, at what stage in the project will risk management become easier. What answer best resolves the difficulty of risk management practices and the effort required?

A. Risk management only becomes easier the more often it is practiced.

B. Risk management is an iterative process and never becomes easier.

C. Risk management only becomes easier when the project moves into project execution.

D. Risk management only becomes easier when the project is closed.

Correct Answer:A

Question 82

You are the project manager of the GHG project. You are preparing for the quantitative risk analysis process. You are using organizational process assets to help you complete the quantitative risk analysis process. Which one of the following is NOT a valid reason to utilize organizational process assets as a part of the quantitative risk analysis process?

A. You will use organizational process assets for risk databases that may be available from industry sources.

B. You will use organizational process assets for studies of similar projects by risk specialists.

C. You will use organizational process assets to determine costs of all risks events within thecurrent project.

D. You will use organizational process assets for information from prior similar projects.

Correct Answer:C

Question 83

Which of the following statements about System Access Control List (SACL) is true?

A. It contains a list of any events that are set to audit for that particular object.

B. It is a mechanism for reducing the need for globally unique IP addresses.

C. It contains a list of both users and groups and whatever permissions they have.

D. It exists for each and every permission entry assigned to any object.

Correct Answer:A

Question 84

You work as a project manager for BlueWell Inc. You with your team are using a method or a (technical) process that conceives the risks even if all theoretically possible safety measures would be applied. One of your team member wants to know that what is a residual risk. What will you reply to your team member?

A. It is a risk that remains because no risk response is taken.

B. It is a risk that remains after planned risk responses are taken.

C. It is a risk that can not be addressed by a risk response.

D. It is a risk that will remain no matter what type of risk response is offered.

Correct Answer:B

START CAP EXAM