You work as a project manager for BlueWell Inc. You with your team are using a method or
a (technical) process that conceives the risks even if all theoretically possible safety
measures would be applied. One of your team member wants to know that what is a
residual risk. What will you reply to your team member?

You are the project manager for your organization. You are preparing for the quantitative
risk analysis. Mark, a project team member, wants to know why you need to do quantitative

risk analysis when you just completed qualitative risk analysis. Which one of the following
statements best defines what quantitative risk analysis is?

Fred is the project manager of the CPS project. He is working with his project team to
prioritize the identified risks within the CPS project. He and the team are prioritizing risks for
further analysis or action by assessing and combining the risks probability of occurrence
and impact. What process is Fred completing?

Diane is the project manager of the HGF Project. A risk that has been identified and
analyzed in the project planning processes is now coming into fruition. What individual
should respond to the risk with the preplanned risk response?

Ned is the project manager of the HNN project for your company. Ned has asked you to
help him complete some probability distributions for his project. What portion of the project
will you most likely use for probability distributions?

Which of the following acts promote a risk-based policy for cost effective security? Each
correct answer represents a part of the solution. Choose all that apply.

To help review or design security controls, they can be classified by several criteria. One of
these criteria is based on time. According to this criteria, which of the following controls are
intended to prevent an incident from occurring?

You are the project manager for a construction project. The project involves casting of a
column in a very narrow space. Because of lack of space, casting it is highly dangerous.
High technical skill will be required for casting that column. You decide to hire a local expert
team for casting that column. Which of the following types of risk response are you
following?

Which of the following statements about the authentication concept of information security
management is true?

You and your project team have identified the project risks and now are analyzing the
probability and impact of the risks. What type of analysis of the risks provides a quick and
high-level review of each identified risk event?