CompTIA CySA+ Practice Questions: Risk Management (CS0-003)

Question 1

What is the main purpose of a risk register? (Q-627ff0)

Accepted Answer

To document identified risks

Answer

To store encryption keys

Answer

To track employee attendance

Answer

To monitor network performance

Question 2

What is the MAIN risk of shadow IT? (Q-627ff5)

Accepted Answer

Unapproved systems lacking security controls

Answer

Increased hardware costs

Answer

Slower internet speeds

Answer

Too many software licenses

Question 3

What is the purpose of a BIA in risk management? (Q-627ff9)

Accepted Answer

To identify critical business functions

Answer

To analyze malware behavior

Answer

To configure firewalls

Answer

To encrypt databases

Question 4

What is the PRIMARY purpose of a risk assessment? (Q-628010)

Accepted Answer

To identify and prioritize risks

Answer

To eliminate all risks

Answer

To automate patching

Answer

To train employees

Question 5

What is the PRIMARY risk of using third-party software repositories? (Q-628020)

Accepted Answer

Supply chain compromises

Answer

Increased licensing costs

Answer

Slower download speeds

Answer

Incompatible file formats

Question 6

Which of the following is an example of a compensating control? (Q-924486)

Accepted Answer

Using a firewall when patching isn't possible

Answer

Implementing biometric authentication

Answer

Encrypting all data at rest

Answer

Disabling USB ports

Question 7

Which NIST CSF function includes asset management? (Q-924488)

Accepted Answer

Identify

Answer

Protect

Answer

Detect

Answer

Respond

Question 8

What does CARTA stand for in security strategy? (Q-628027)

Accepted Answer

Continuous Adaptive Risk and Trust Assessment

Answer

Centralized Automated Response Threat Analysis

Answer

Certified Advanced Risk Technical Audit

Answer

Cybersecurity Asset Recovery and Threat Awareness

Question 9

What is the PRIMARY purpose of a chaos engineering practice? (Q-628036)

Accepted Answer

To intentionally break systems to improve resilience

Answer

To encrypt all network traffic

Answer

To block malware downloads

Answer

To train employees on phishing

Question 10

What does SBOM stand for in software supply chain security? (Q-628041)

Accepted Answer

Software Bill of Materials

Answer

Secure Boot Order Management

Answer

System Backup Operation Mode

Answer

Security Baseline Operations Manual

Question 11

What is the PRIMARY purpose of the ACSC Essential Eight? (Q-628047)

Accepted Answer

To provide prioritized mitigation strategies

Answer

To list all known vulnerabilities

Answer

To replace NIST frameworks

Answer

To automate malware analysis

Question 12

What does SBOM stand for in software supply chain security? (Q-628063)

Accepted Answer

Software Bill of Materials

Answer

Secure Boot Order Management

Answer

System Backup Operation Mode

Answer

Security Baseline Operations Manual

Question 13

What is the PRIMARY purpose of the ACSC Essential Eight? (Q-628065)

Accepted Answer

To provide prioritized mitigation strategies

Answer

To list all known vulnerabilities

Answer

To replace NIST frameworks

Answer

To automate malware analysis

Question 14

What does SBOM stand for in software supply chain security? (Q-628069)

Accepted Answer

Software Bill of Materials

Answer

Secure Boot Order Management

Answer

System Backup Operation Mode

Answer

Security Baseline Operations Manual

Question 15

What is the PRIMARY purpose of the ACSC Essential Eight? (Q-628075)

Accepted Answer

To provide prioritized mitigation strategies

Answer

To list all known vulnerabilities

Answer

To replace NIST frameworks

Answer

To automate malware analysis

Question 16

What does SBOM stand for in software supply chain security? (Q-628079)

Accepted Answer

Software Bill of Materials

Answer

Secure Boot Order Management

Answer

System Backup Operation Mode

Answer

Security Baseline Operations Manual

Question 17

What is the PRIMARY purpose of the ACSC Essential Eight? (Q-628085)

Accepted Answer

To provide prioritized mitigation strategies

Answer

To list all known vulnerabilities

Answer

To replace NIST frameworks

Answer

To automate malware analysis

CompTIA CySA+ Practice Questions: Risk Management

Q1. What is the main purpose of a risk register? (Q-627ff0)

Q2. What is the MAIN risk of shadow IT? (Q-627ff5)

Q3. What is the purpose of a BIA in risk management? (Q-627ff9)

Q4. What is the PRIMARY purpose of a risk assessment? (Q-628010)

Q5. What is the PRIMARY risk of using third-party software repositories? (Q-628020)

Q6. Which of the following is an example of a compensating control? (Q-924486)

Q7. Which NIST CSF function includes asset management? (Q-924488)

Q8. What does CARTA stand for in security strategy? (Q-628027)

Q9. What is the PRIMARY purpose of a chaos engineering practice? (Q-628036)

Q10. What does SBOM stand for in software supply chain security? (Q-628041)

Q11. What is the PRIMARY purpose of the ACSC Essential Eight? (Q-628047)

Q12. What does SBOM stand for in software supply chain security? (Q-628063)

Q13. What is the PRIMARY purpose of the ACSC Essential Eight? (Q-628065)

Q14. What does SBOM stand for in software supply chain security? (Q-628069)

Q15. What is the PRIMARY purpose of the ACSC Essential Eight? (Q-628075)

Q16. What does SBOM stand for in software supply chain security? (Q-628079)

Q17. What is the PRIMARY purpose of the ACSC Essential Eight? (Q-628085)

More CompTIA CySA+ practice topics