{{asɛmtiNe Ɔkyerɛwfo}} | Nhomakorabea | Nneɛma a ɛma wotumi yɛ ade

1

What are the two main factors used in a quantitative risk analysis?

A. Severity and duration

B. Cost and time

C. Likelihood and impact

D. Reputation and response time

1

Which of the following best describes a “vulnerability”?

A. A successful cyberattack

B. A weakness in a system that can be exploited

C. A security tool used to protect systems

D. An encrypted communication method

1

Why might an adversary choose to exploit a vulnerability that has a well-documented exploit?

A. It's more likely to attract media attention

B. It requires less effort or technical skill

C. It always causes more damage

D. It makes the attack legal

1

A Blue Team assigns a Likelihood Score of 9 and an Impact Score of $100,000 to a vulnerability. What is the expected risk?

A. $9

B. $100,009

C. $900,000

D. $91,000

1

Which of the following best explains why an adversary might target a small biotech startup?

A. Startups always have better cybersecurity

B. Startups often store large amounts of sensitive data and may lack strong defenses

C. Startups usually invite attacks to test their systems

D. Adversaries prefer easy legal targets

1

6. If a Blue Team has a limited budget and multiple vulnerabilities to fix, what should they do first?

A. Spend the budget evenly across all vulnerabilities

B. Mitigate the cheapest vulnerabilities

C. Wait for an attack to happen before responding

D. Fix the vulnerabilities with the highest risk scores

AP Cybersecurity: 1.2A - Formative Assessment Questions

AP Cybersecurity: 1.2A - Formative Assessment Questions

What are the two main factors used in a quantitative risk analysis?

Which of the following best describes a “vulnerability”?

Why might an adversary choose to exploit a vulnerability that has a well-documented exploit?

A Blue Team assigns a Likelihood Score of 9 and an Impact Score of $100,000 to a vulnerability. What is the expected risk?

Which of the following best explains why an adversary might target a small biotech startup?

6. If a Blue Team has a limited budget and multiple vulnerabilities to fix, what should they do first?

What are the two main factors used in a quantitative risk analysis?

Which of the following best describes a “vulnerability”?

Why might an adversary choose to exploit a vulnerability that has a well-documented exploit?

A Blue Team assigns a Likelihood Score of 9 and an Impact Score of $100,000 to a vulnerability. What is the expected risk?

Which of the following best explains why an adversary might target a small biotech startup?

6. If a Blue Team has a limited budget and multiple vulnerabilities to fix, what should they do first?