Fred is the project manager of the CPS project. He is working with his project team to
prioritize the identified risks within the CPS project. He and the team are prioritizing risks for
further analysis or action by assessing and combining the risks probability of occurrence
and impact. What process is Fred completing?

Diane is the project manager of the HGF Project. A risk that has been identified and
analyzed in the project planning processes is now coming into fruition. What individual
should respond to the risk with the preplanned risk response?

Ned is the project manager of the HNN project for your company. Ned has asked you to
help him complete some probability distributions for his project. What portion of the project
will you most likely use for probability distributions?

Which of the following acts promote a risk-based policy for cost effective security? Each
correct answer represents a part of the solution. Choose all that apply.

To help review or design security controls, they can be classified by several criteria. One of
these criteria is based on time. According to this criteria, which of the following controls are
intended to prevent an incident from occurring?

You are the project manager for a construction project. The project involves casting of a
column in a very narrow space. Because of lack of space, casting it is highly dangerous.
High technical skill will be required for casting that column. You decide to hire a local expert
team for casting that column. Which of the following types of risk response are you
following?

Which of the following statements about the authentication concept of information security
management is true?

You and your project team have identified the project risks and now are analyzing the
probability and impact of the risks. What type of analysis of the risks provides a quick and
high-level review of each identified risk event?

NIST SP 800-53A defines three types of interview depending on the level of assessment
conducted. Which of the following NIST SP 800-53A interviews consists of informal and ad
hoc interviews?

What are the responsibilities of a system owner? Each correct answer represents a
complete solution. Choose all that apply.