MENU
A company's web server availability was breached by a DDoS attack and was offline for 3 hours because it was not deemed a critical asset in the incident response playbook. Leadership has requested a risk assessment of the asset. An analyst conducted the risk assessment using the threat sources, events, and vulnerabilities. Which additional element is needed to calculate the risk?
Suggested Answer: D
Get Premium 350-201 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
GR
Gregoria
12 months ago
A risk model framework sounds like a solid foundation too!
CO
Coletta
12 months ago
Incident response playbook is important, but it’s not enough alone.
TR
Truman
1 year ago
Wait, how can they assess risk without knowing the likelihood? Seems off.
ZE
Zena
1 year ago
Totally agree, B is the right choice!
BR
Brittney
1 year ago
You need to know the event severity and likelihood to calculate risk.
LI
Ling
1 year ago
Hmm, this one seems tricky. I'll need to think carefully about the differences between these options.
SE
Selma
1 year ago
Key is to focus on the incurred claims number, not paid claims. Don't get distracted by the total expenses.
VA
Vashti
1 year ago
C is wrong! Only matching CATCHes run.
GE
Gearldine
1 year ago
Hmm, I'm a bit confused. Does the payment clearing date matter for revenue recognition under accrual accounting? I'll need to think this through carefully.
IN
Ines
1 year ago
This seems like a tricky one. I'll need to think carefully about the options and how they could impact the application without making any changes to the code.
PE
Peter Buswell
4 years ago
B is the correct answer!