ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 579 - SY0-601 discussion

Report
Export

Which of the following test describes the risk that is present once mitigations are applied?

A.
Control risk
Answers
A.
Control risk
B.
Residual risk
Answers
B.
Residual risk
C.
Inherent risk
Answers
C.
Inherent risk
D.
Risk awareness
Answers
D.
Risk awareness
Suggested answer: B

Explanation:

Residual risk is the risk that remains after applying risk mitigation measures, such as controls, policies, or procedures. It reflects the level of uncertainty and potential impact that cannot be completely eliminated by risk management efforts. Residual risk is calculated by subtracting the risk reduction from the inherent risk, or by multiplying the inherent risk by the risk control effectiveness.

Residual risk should be compared to the acceptable level of risk to determine if further action is needed or if the risk can be accepted by the management. Reference: CompTIA Security+ SY0-601 Certification Study Guide, Chapter 10: Summarizing Risk Management Concepts, page 456; Residual risk - Wikipedia; Residual risk definition and why it's important - Advisera

asked 02/10/2024
Carlos Augusto Quintal
29 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first