Risk Assessment & Management Flashcards
7 cards from real 70-413 Exam practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Risk Assessment & Management flashcards as text
A company is designing a new Active Directory forest. Which risk mitigation strategy involves creating a separate forest for high-security resources to limit blast radius from a compromise?
Answer: Security boundary isolation
Creating a separate AD forest establishes a security boundary that contains potential compromises, limiting their impact to only that forest.
During a risk assessment for a Windows Server 2012 R2 deployment, you identify that a critical patch cannot be applied due to a vendor-unsupported application. What is the BEST compensating control?
Answer: Isolate the server on a restricted VLAN with enhanced monitoring
Network isolation with enhanced monitoring is the best compensating control when a patch cannot be applied, reducing exposure while maintaining functionality.
Which qualitative risk assessment method assigns risks to categories such as High, Medium, and Low based on likelihood and impact?
Answer: Risk matrix (heat map)
A risk matrix plots likelihood versus impact to categorize risks into qualitative levels like High, Medium, and Low.
Your organization must comply with a regulation requiring encryption of all data at rest. You implement BitLocker on all servers. Which risk management concept does this represent?
Answer: Risk mitigation
Implementing BitLocker encryption reduces the impact of a data breach, which is an example of risk mitigation.
A risk assessment identifies that a data center flood could destroy all servers. The company decides to purchase flood insurance. Which risk response strategy is this?
Answer: Risk transference
Purchasing insurance transfers the financial consequences of a risk to a third party, which is risk transference.
In quantitative risk analysis, what does the term 'Exposure Factor (EF)' represent?
Answer: The percentage of an asset's value lost in a single risk event
Exposure Factor (EF) is the percentage of the asset value that would be lost if a specific threat were realized.
You are assessing risks for a Windows Server infrastructure migration. Which document formally authorizes the project team to proceed while acknowledging remaining residual risks?
Answer: Risk acceptance sign-off (acceptance letter)
A formal risk acceptance sign-off documents that management acknowledges and accepts the residual risks associated with proceeding.