Which of the following is the BEST way to ensure that outsourced service providers comply with
the enterprise’s information security policy?

You are the project manager of RFT project. You have identified a risk that the enterprise’s IT
system and application landscape is so complex that, within a few years, extending capacity will
become difficult and maintaining software will become very expensive. To overcome this risk the
response adopted is re-architecture of the existing system and purchase of new integrated
system. In which of the following risk

prioritization options would this case be categorized?

Which of the following BEST ensures that a firewall is configured in compliance with an
enterprise’s security policy?

Which of following is NOT used for measurement of Critical Success Factors of the project?

Which of the following statements is NOT true regarding the risk management plan?

You are the project manager of a project in Bluewell Inc. You and your project team have identified
several project risks, completed risk analysis, and are planning to apply most appropriate risk
responses. Which of the following tools would you use to choose the appropriate risk response?

You are the risk official of your enterprise. Your enterprise takes important decisions without

considering risk credential information and is also unaware of external requirements for risk
management and integration with enterprise risk management. In which of the following risk
management capability maturity levels does your enterprise exists?

Which of the following is the priority of data owners when establishing risk mitigation method?

What type of policy would an organization use to forbid its employees from using organizational email for personal use?

Wendy has identified a risk event in her project that has an impact of $75,000 and a 60 percent
chance of happening. Through research, her project team learns that the risk impact can actually
be reduced to just $15,000 with only a ten percent chance of occurring. The proposed solution will
cost $25,000. Wendy agrees to the $25,000 solution. What type of risk response is this?