FREE CPO Security Risk Management & Threat Assessment Questions and Answers

Question 1

Which of the following is a key objective of security risk management?

Accepted Answer

Reduce risk to an acceptable level.

Answer

Maximize security budget.

Answer

Eliminate all threats completely.

Answer

Increase staff workload.

Question 2

What is the first step in conducting a threat assessment?

Accepted Answer

Identify potential threats.

Answer

Develop response strategies.

Answer

Install security systems.

Answer

Notify local authorities.

Question 3

Which term describes the likelihood that a threat will exploit a vulnerability?

Accepted Answer

Risk

Answer

Hazard

Answer

Mitigation

Answer

Resistance

Question 4

What is the purpose of a vulnerability assessment?

Accepted Answer

To identify weaknesses in a system.

Answer

To enforce company rules.

Answer

To evaluate threat intent.

Answer

To increase surveillance costs.

Question 5

What is an example of a physical security control?

Accepted Answer

Motion detector

Answer

Security policy

Answer

Firewall

Answer

Data encryption

Question 6

Which element is NOT part of the risk assessment process?

Accepted Answer

Marketing strategy

Answer

Threat identification

Answer

Vulnerability analysis

Answer

Risk acceptance

Question 7

What does CPTED stand for in threat assessment?

Accepted Answer

Crime Prevention Through Environmental Design

Answer

Criminal Pattern Training & Environmental Defense

Answer

Counter Protective Tactics & Emergency Defense

Answer

Controlled Physical Techniques for Emergency Deployment

Question 8

What role does access control play in risk management?

Accepted Answer

It prevents unauthorized access.

Answer

It increases user convenience.

Answer

It decreases monitoring needs.

Answer

It enhances password sharing.

Question 9

Which of the following best defines 'residual risk'?

Accepted Answer

Risk left after controls are implemented.

Answer

All threats removed.

Answer

Risk before assessment.

Answer

Low-priority vulnerabilities only.