A small medical clinic is deciding how to assess its network vulnerability to ransomware. They want to weigh both how likely it is to be attacked and how damaging the attack could be. What process are they using?
After a data breach, a retail company loses customers, faces lawsuits, and their payment system is down for days. Which type of damage is best described by “customers no longer trust the company's brand”?
A hacker is deciding whether to exploit a flaw in a government portal. The flaw is hard to exploit and requires advanced coding knowledge. Which factor is most influencing the likelihood of exploitation?
An activist group wants to deface a corporation’s website to protest environmental harm. They gain no financial benefit but see it as highly valuable. Why would this site be considered a high-value target?
A building has an emergency exit with a motion sensor that unlocks the door from inside. Attackers learn they can slide a piece of cardboard under the door to trigger it. Why is this vulnerability highly likely to be exploited?
A nation-state adversary uses secret, undiscovered vulnerabilities (zero-days) to control devices worldwide. Which factor best explains why they succeed?
A school labels its outdated firewall risk as “medium likelihood, high impact.” What type of risk analysis is being used?
A bank estimates that a data breach could cost them $250,000 in losses if it occurs. What type of analysis is this?
A company decides to shut down its mobile app completely because it creates too many risks. What type of risk management is this?
A small business purchases cyber insurance to protect against financial loss from attacks. Which strategy is this?
An e-commerce site adds multi-factor authentication to reduce the chances of account takeovers. What type of strategy is this?
Even after a company buys insurance and installs security updates, there’s still a chance of attack. What is this leftover risk called?
A university accepts that its public Wi-Fi network will never be 100% secure but continues to provide it. What strategy is this?
A hospital is hit by ransomware but quickly restores patient records from last night’s backup and continues normal operations. Which quality does this demonstrate?
A company invests in a second fully equipped office that can take over operations instantly after a disaster. What type of backup site is this?
A firm has an empty rented office with power and internet connections but no hardware. If disaster strikes, it would take weeks to set up. What type of backup site is this?
A university has a facility with internet and servers installed, but no recent backups loaded. It could be running in days, but not immediately. What type of site is this?
After an attack, an airline restores critical flight systems by loading data from its system backup. What makes this possible?
A company requires employees to switch roles every few months so more than one person can handle critical tasks in a crisis. What resiliency strategy is this?
An organization debates whether to pay for a hot backup site or stick with a cheaper cold site. What are they weighing?