You are the project manager for the NHH project. You are working with your project team to
examine the project from four different defined perspectives to increase the breadth of
identified risks by including internally generated risks. What risk identification approach are
you using in this example?

Which of the following are included in Physical Controls? Each correct answer represents a
complete solution. Choose all that apply.

Which of the following NIST Special Publication documents provides a guideline on network
security testing?

Which one of the following is the only output for the qualitative risk analysis process?

You are the project manager of the GHG project. You are preparing for the quantitative risk
analysis process. You are using organizational process assets to help you complete the
quantitative risk analysis process. Which one of the following is NOT a valid reason to utilize

organizational process assets as a part of the quantitative risk analysis process?

Which of the following objectives are defined by integrity in the C.I.A triad of information
security systems? Each correct answer represents a part of the solution. Choose three.

You and your project team are just starting the risk identification activities for a project that
is scheduled to last for 18 months. Your project team has already identified a long list of
risks that need to be analyzed. How often should you and the project team do risk
identification?

Eric is the project manager of the MTC project for his company. In this project a vendor has
offered Eric a sizeable discount on all hardware if his order total for the project is more than
$125,000. Right now, Eric is likely to spend $118,000 with vendor. If Eric spends $7,000 his
cost savings for the project will be $12,500, but he cannot purchase hardware if he cannot
implement the hardware immediately due to organizational policies. Eric consults with Amy
and Allen, other project managers in the organization, and asks if she needs any hardware
for their projects. Both Amy and Allen need hardware and they agree to purchase the
hardware through Eric’s relationship with the vendor. What positive risk response has
happened in this instance?

You work as a project manager for BlueWell Inc. You are preparing to plan risk responses
for your project with your team. How many risk response types are available for a negative
risk event in the project?

Sam is the project manager of a construction project in south Florida. This area of the
United States is prone to hurricanes during certain parts of the year. As part of the project
plan Sam and the project team acknowledge the possibility of hurricanes and the damage
the hurricane could have on the project’s deliverables, the schedule of the project, and the
overall cost of the project. Once Sam and the project stakeholders acknowledge the risk of
the hurricane they go on planning the project as if the risk is not likely to happen. What type
of risk response is Sam using?