SSCP: exam 2023 with 100% correct answers

Risk refers to what? The probability of an incident occurring that can result in some negative impact Effective way to ensure zero risk? None not engaging in the activity that introduces that risk Risk Register Detailed document of compiled risks Output of risk assessment Why can sharing threat intelligence be complicated? Legal Security Privacy How is the impact of a risk measured? Through risk assessment Risk level based on the overall impact the event would have on an organization's assets or business processes Quantitative risk assessment is based on what? Monetary assessment identifies the impact Qualitative risk assessment base on what? Expert opinion to identifies impact Vulnerabilities are defined as what? Infrastructure Network System Weaknesses The vulnerabilities could be related to? System Security Design Implementation Internal Controls Loss occurs when? When a weakness is exploited by a threat What are come common vulnerabilities? Insufficient antivirus protection Disgruntled employees Inadequate access controls Lack of change management measures Insufficient system hardening Single points of system failure Uneducated users Risk assessments do what? examine risk within a set time period identify potential risks and mitigating measures