Question 3 (1 point) Every Information Asset on a project ... O Contains the same level of risk. Contains risks that are specific to the value and vulnerability of that asset can only contain one vulnerability. If they contain more, they are separated into distinct assets. Question 4 (1 point) Acceptance or tolerance of a risk with a high probability and negative impact should be undertaken before risk deduction and modification have been considered? True False Question 5 (1 point)Question 5 (1 point) Detective Controls ... Designed to stop an incident from taking place before it has begun operate alongside other types of tactical controls by providing a warning or alarm to possible threat Are instruction-based policies, procedures, processes for end-users. Question 6 (1 point) Preventative Controls ... Are reactive controls that address a threat once it has materialized. Designed to stop an incident from taking place before it has begun. Communicate threat to external monitoring services to respond to incidents as they occur.IShima Lo Lama: Attempt 1 Question 7 (1 point) As the complexity of hardware, software, and network configurations increases the need for applying risk management processes and protocols for data protection ... O Increases Decreases Remains the same. Question 8 (1 point) Which of the following are used as security measures to protect data ... Othcident Management. Administrative Account Monitoring and Control.Nirishma Lo Lama: Attempt 1 Question 8 (1 point) Which of the following are used as security measures to protect data ... Incident Management. Administrative Account Monitoring and Control. Auditing Access logs to validate users O All of the above Question 9 (1 point) Penetration testing is a reliable way to ... Plan the the development of Security risk controls prior to development.Nirishma Lo Lama: Attempt 1 Question 8 (1 point) Which of the following are used as security measures to protect data ... Incident Management. Administrative Account Monitoring and Control. Auditing Access logs to validate users O All of the above Question 9 (1 point) Penetration testing is a reliable way to ... Plan the the development of Security risk controls prior to development.0 Nirishma Lo Lama: Attempt 1 QUESLIUII LU ( 1 PUIIIy Vulnerability assessment and remediation should be performed ... Once a system is released into the customer's IT environment and reassessed in 5 years. O At all times, with no limit of resources in terms of cost and time. At regular intervals and at points of major update involving updated data transfer and/or configuration. Question 11 (5 points) Please describe Risk Control activities with regard to Preventative, Detective, and Corrective controls and provide an example a scenario (either in Information Technology or Real Life) where each of these control types would be appropriate.Nirishma Lo Lama: Attempt 1 Question 1 (1 point) Saved Changes to Project Plan resulting from identification of Project Risks is always negative. True False Question 2 (1 point) Saved In the context of Project Risk Treatment a 'Control Measure is ... A modification to the project plan that eliminates project risk Processes that identify and analyze the level of project risk and assign a numeric value to each risk. O Any deliberate measure or action that modifies risk to an acceptable level. oint)