New Year Sale 2026! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

BCS CISMP-V9 Exam - Topic 1 Question 45 Discussion

Actual exam question for BCS's CISMP-V9 exam
Question #: 45
Topic #: 1
[All CISMP-V9 Questions]

Which of the following describes a qualitative risk assessment approach?

Show Suggested Answer Hide Answer
Suggested Answer: C

Contribute your Thoughts:

0/2000 characters
Francene
4 months ago
Not sure about A, feels too vague to me.
upvoted 0 times
...
Freeman
4 months ago
Wait, is A really the only qualitative method?
upvoted 0 times
...
Francesco
4 months ago
A subjective approach? Sounds risky!
upvoted 0 times
...
Marion
5 months ago
I think B makes more sense, though.
upvoted 0 times
...
Nickole
5 months ago
A is definitely the right choice!
upvoted 0 times
...
Chan
5 months ago
I feel like D is more about risk management frameworks rather than directly assessing risk qualitatively.
upvoted 0 times
...
Nadine
5 months ago
I’m pretty sure that Monte-Carlo Analysis is more quantitative, so C doesn’t fit with qualitative assessments.
upvoted 0 times
...
Ashton
5 months ago
I remember practicing a question similar to this, and I think qualitative means not relying on hard data, which makes me unsure about B.
upvoted 0 times
...
Jesse
5 months ago
I think qualitative risk assessment is more about subjective judgments, so I’m leaning towards option A.
upvoted 0 times
...
Clarinda
5 months ago
Okay, let me take a closer look at the details. It looks like we need to configure an access control list (ACL) to deny OSPF and ICMP packets on the GigabitEthernet0/0/1 interface. I think I can handle this.
upvoted 0 times
...
Anglea
5 months ago
I recall a similar question where we discussed the importance of comparing with facilities that have superior performance. That could definitely help us improve.
upvoted 0 times
...
Eloisa
5 months ago
This seems like a straightforward question about trust mechanisms between a customer and a provider. I'll need to think through the options carefully, but I'm confident I can identify the best answer.
upvoted 0 times
...
Abel
10 months ago
Option A? More like option 'Eh, close enough.' Amirite, folks? Qualitative risk assessment, where the 'quality' is how well I can bullsh*t my way through it.
upvoted 0 times
Glory
8 months ago
D) The use of Risk Tolerance and Risk Appetite values to determine the overall severity of a risk
upvoted 0 times
...
Lou
8 months ago
C) The use of Monte-Carlo Analysis and Layers of Protection Analysis (LOPA) to determine the overall severity of a risk.
upvoted 0 times
...
Octavio
9 months ago
User 3: User Comment: Option A? More like option 'Eh, close enough.' Amirite, folks?
upvoted 0 times
...
Linsey
9 months ago
User 2: B) The use of verifiable data to predict the risk occurrence likelihood and the potential impact so as to determine the overall severity of a risk.
upvoted 0 times
...
Herminia
9 months ago
B) The use of verifiable data to predict the risk occurrence likelihood and the potential impact so as to determine the overall severity of a risk.
upvoted 0 times
...
Fernanda
9 months ago
A) A subjective assessment of risk occurrence likelihood against the potential impact that determines the overall severity of a risk.
upvoted 0 times
...
Sena
9 months ago
User 1: A) A subjective assessment of risk occurrence likelihood against the potential impact that determines the overall severity of a risk.
upvoted 0 times
...
...
Nada
10 months ago
D, all the way. Risk tolerance and appetite? Sounds like they're trying to make this as complicated as possible. I'm just gonna go with my 'keep it simple, stupid' approach.
upvoted 0 times
Milly
9 months ago
B) The use of verifiable data to predict the risk occurrence likelihood and the potential impact so as to determine the overall severity of a risk.
upvoted 0 times
...
Dulce
9 months ago
D) The use of Risk Tolerance and Risk Appetite values to determine the overall severity of a risk
upvoted 0 times
...
Royce
10 months ago
A) A subjective assessment of risk occurrence likelihood against the potential impact that determines the overall severity of a risk.
upvoted 0 times
...
...
Glory
11 months ago
C, for sure! Monte-Carlo and LOPA? That's some high-level risk assessment stuff right there. I'm feeling fancy just reading it.
upvoted 0 times
Jarvis
10 months ago
It's important to have a comprehensive approach when assessing risks, and these methods definitely help in that aspect.
upvoted 0 times
...
Mabel
10 months ago
I agree, using Monte-Carlo Analysis and LOPA definitely adds a sophisticated touch to risk assessment.
upvoted 0 times
...
...
Therese
11 months ago
B seems solid, using data to make informed decisions. That's my jam. Gotta love those verifiable facts!
upvoted 0 times
...
Noe
11 months ago
Option A sounds like the way to go. I'm more of a 'gut feeling' kind of risk assessor, you know?
upvoted 0 times
Yvonne
10 months ago
Bulah: I guess it all comes down to personal preference in the end.
upvoted 0 times
...
Lucille
10 months ago
User 3: I'm with you on that, Lucille. Option B sounds more reliable.
upvoted 0 times
...
Bulah
10 months ago
User 2: I prefer using verifiable data, so option B is my choice.
upvoted 0 times
...
Vivan
11 months ago
User 1: I agree, option A seems like a more subjective approach.
upvoted 0 times
...
...
Mona
11 months ago
I'm not sure, but A does sound like a subjective approach.
upvoted 0 times
...
Kayleigh
11 months ago
I agree with Twana, A makes sense for qualitative risk assessment.
upvoted 0 times
...
Twana
11 months ago
I think the answer is A.
upvoted 0 times
...

Save Cancel