MENU
Which of the following describes a qualitative risk assessment approach?
Suggested Answer: C
Get Premium CISMP-V9 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
36 comments · newest first
FR
Francene
11 months ago
Not sure about A, feels too vague to me.
FR
Freeman
11 months ago
Wait, is A really the only qualitative method?
FR
Francesco
12 months ago
A subjective approach? Sounds risky!
MA
Marion
12 months ago
I think B makes more sense, though.
NI
Nickole
12 months ago
A is definitely the right choice!
CH
Chan
1 year ago
I feel like D is more about risk management frameworks rather than directly assessing risk qualitatively.
NA
Nadine
1 year ago
I’m pretty sure that Monte-Carlo Analysis is more quantitative, so C doesn’t fit with qualitative assessments.
AS
Ashton
1 year ago
I remember practicing a question similar to this, and I think qualitative means not relying on hard data, which makes me unsure about B.
JE
Jesse
1 year ago
I think qualitative risk assessment is more about subjective judgments, so I’m leaning towards option A.
CL
Clarinda
1 year ago
Okay, let me take a closer look at the details. It looks like we need to configure an access control list (ACL) to deny OSPF and ICMP packets on the GigabitEthernet0/0/1 interface. I think I can handle this.
AN
Anglea
1 year ago
I recall a similar question where we discussed the importance of comparing with facilities that have superior performance. That could definitely help us improve.
EL
Eloisa
1 year ago
This seems like a straightforward question about trust mechanisms between a customer and a provider. I'll need to think through the options carefully, but I'm confident I can identify the best answer.
AB
Abel
1 year ago
Option A? More like option 'Eh, close enough.' Amirite, folks? Qualitative risk assessment, where the 'quality' is how well I can bullsh*t my way through it.
GL
Glory
1 year ago
D) The use of Risk Tolerance and Risk Appetite values to determine the overall severity of a risk
LO
Lou
1 year ago
C) The use of Monte-Carlo Analysis and Layers of Protection Analysis (LOPA) to determine the overall severity of a risk.
OC
Octavio
1 year ago
User 3: User Comment: Option A? More like option 'Eh, close enough.' Amirite, folks?
LI
Linsey
1 year ago
User 2: B) The use of verifiable data to predict the risk occurrence likelihood and the potential impact so as to determine the overall severity of a risk.
HE
Herminia
1 year ago
B) The use of verifiable data to predict the risk occurrence likelihood and the potential impact so as to determine the overall severity of a risk.
FE
Fernanda
1 year ago
A) A subjective assessment of risk occurrence likelihood against the potential impact that determines the overall severity of a risk.
SE
Sena
1 year ago
User 1: A) A subjective assessment of risk occurrence likelihood against the potential impact that determines the overall severity of a risk.
NA
Nada
1 year ago
D, all the way. Risk tolerance and appetite? Sounds like they're trying to make this as complicated as possible. I'm just gonna go with my 'keep it simple, stupid' approach.
MI
Milly
1 year ago
B) The use of verifiable data to predict the risk occurrence likelihood and the potential impact so as to determine the overall severity of a risk.
DU
Dulce
1 year ago
D) The use of Risk Tolerance and Risk Appetite values to determine the overall severity of a risk
RO
Royce
1 year ago
A) A subjective assessment of risk occurrence likelihood against the potential impact that determines the overall severity of a risk.
GL
Glory
1 year ago
C, for sure! Monte-Carlo and LOPA? That's some high-level risk assessment stuff right there. I'm feeling fancy just reading it.
JA
Jarvis
1 year ago
It's important to have a comprehensive approach when assessing risks, and these methods definitely help in that aspect.
MA
Mabel
1 year ago
I agree, using Monte-Carlo Analysis and LOPA definitely adds a sophisticated touch to risk assessment.
TH
Therese
2 years ago
B seems solid, using data to make informed decisions. That's my jam. Gotta love those verifiable facts!
NO
Noe
2 years ago
Option A sounds like the way to go. I'm more of a 'gut feeling' kind of risk assessor, you know?
YV
Yvonne
1 year ago
Bulah: I guess it all comes down to personal preference in the end.
LU
Lucille
1 year ago
User 3: I'm with you on that, Lucille. Option B sounds more reliable.
BU
Bulah
1 year ago
User 2: I prefer using verifiable data, so option B is my choice.
VI
Vivan
1 year ago
User 1: I agree, option A seems like a more subjective approach.
MO
Mona
2 years ago
I'm not sure, but A does sound like a subjective approach.
KA
Kayleigh
2 years ago
I agree with Twana, A makes sense for qualitative risk assessment.
TW
Twana
2 years ago
I think the answer is A.