After performing an assessment, an analyst wants to provide a risk rating for the findings. Which of the following concepts should most likely be considered when calculating the ratings?

Probability and exposure factor

A company hired a security manager from outside the organization to lead security operations. Which of the following actions should the security manager perform first in this new role?

Perform a user ID revalidation.

Having a backout plan when a patch fails

Approving the change after a successful deployment

Having a backout plan when a patch fails

Using a spreadsheet for tracking changes

Using an automatic change control bypass for security updates

Estimating the recovery time of systems

Identifying the communication strategy

Evaluating the risk management plan

Establishing the backup and recovery procedures

Developing the incident response plan

Add the server to the asset inventory.

Join the server to the corporate domain.

Role as controller or processor

Reporting structure for the data privacy officer

Request process for data subject access

Role as controller or processor

Physical location of the company

Weekly full backups with daily incremental stored on a NAS drive

Hourly differential backups stored on a local SAN array

Dally full backups stored on premises in magnetic offline media

Daly differential backups maintained by a third-party cloud provider

Weekly full backups with daily incremental stored on a NAS drive

Which of the following best describes configuring devices to log to an off-site location for possible future reference?

Become a Premium Member for full access