Jeff, a key stakeholder in your project, wants to know how the risk exposure for the risk

events is calculated during quantitative risk analysis. He is worried about the risk exposure
which is too low for the events surrounding his project requirements. How is the risk
exposure calculated?

You work as a project manager for SoftTech Inc. You are working with the project
stakeholders to begin the qualitative risk analysis process. You will need all of the following
as inputs to the qualitative risk analysis process except for which one?

What component of the change management system is responsible for evaluating, testing,
and documenting changes created to the project scope?

A project team member has just identified a new project risk. The risk event is determined to
have significant impact but a low probability in the project. Should the risk event happen it’ll
cause the project to be delayed by three weeks, which will cause new risk in the project.
What should the project manager do with the risk event?

Which of the following concepts represent the three fundamental principles of information
security? Each correct answer represents a complete solution. Choose three.

Which of the following governance bodies provides management, operational and technical
controls to satisfy security requirements?

Your organization has a project that is expected to last 20 months but the customer would
really like the project completed in 18 months. You have worked on similar projects in the
past and believe that you could fast track the project and reach the 18 month deadline.
What increases when you fast track a project?

The IAM/CA makes certification accreditation recommendations to the DAA. The DAA
issues accreditation determinations. Which of the following are the accreditation
determinations issued by the DAA? Each correct answer represents a complete solution.
Choose all that apply.

Tom is the project manager for his organization. In his project he has recently finished the
risk response planning. He tells his manager that he will now need to update the cost and
schedule baselines. Why would the risk response planning cause Tom the need to update
the cost and schedule baselines?

During qualitative risk analysis you want to define the risk urgency assessment. All of the
following are indicators of risk priority except for which one?