GAQM Exam ISO-IEC-LI Topic 5 Question 94 Discussion

Actual exam question for GAQM's ISO-IEC-LI exam

Question #: 94
Topic #: 5

You are the owner of a growing company, SpeeDelivery, which provides courier services. You decide that it is time to draw up a risk analysis for your information system. This includes an inventory of threats and risks. What is the relation between a threat, risk and risk analysis?

AA risk analysis identifies threats from the known risks.

BA risk analysis is used to clarify which threats are relevant and what risks they involve.

CA risk analysis is used to remove the risk of a threat.

DRisk analyses help to find a balance between threats and risks.

Show Suggested Answer

Suggested Answer: B

by Rosenda at Mar 06, 2025, 04:05 PM

Limited Time Offer

25%

Off

Get Premium ISO-IEC-LI Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Derrick

4 months ago

Option C is just silly. Risk analysis is about understanding risks, not removing them. That's like trying to get rid of the monster under your bed by ignoring it.

upvoted 0 times

...

Jacob

4 months ago

I'm going with Option B. It's the most straightforward and accurate description of what a risk analysis does.

upvoted 0 times

Ira

3 months ago

User 3: Definitely, it's important to understand the relationship between threats and risks.

upvoted 0 times

...

Kimberlie

3 months ago

User 2: I agree, a risk analysis helps clarify relevant threats and the risks they involve.

upvoted 0 times

...

Selma

3 months ago

User 1: I think Option B is the best choice.

upvoted 0 times

...

Dorcas

4 months ago

I believe that option B) is the correct answer. A risk analysis is crucial for identifying and managing potential threats effectively.

upvoted 0 times

...

Ariel

4 months ago

Option D seems like a bit of a stretch. Risk analysis is more about understanding the risks, not necessarily finding a balance between threats and risks.

upvoted 0 times

Tamar

3 months ago

Option D seems like a bit of a stretch. Risk analysis is more about understanding the risks, not necessarily finding a balance between threats and risks.

upvoted 0 times

...

Marla

3 months ago

B) A risk analysis is used to clarify which threats are relevant and what risks they involve.

upvoted 0 times

...

Daisy

4 months ago

A) A risk analysis identifies threats from the known risks.

upvoted 0 times

...

Ashlyn

4 months ago

I agree with Charisse. A risk analysis helps us understand the potential threats and the risks they pose to our information system.

upvoted 0 times

...

Charisse

4 months ago

I think the relation between a threat, risk, and risk analysis is that a risk analysis is used to clarify which threats are relevant and what risks they involve.

upvoted 0 times

...

Antonio

4 months ago

I agree with Mira. Risk analysis is all about understanding the threats and the risks they pose, not just identifying threats from known risks.

upvoted 0 times

...

Mira

4 months ago

Option B is clearly the correct answer. A risk analysis is used to identify and assess the risks associated with known threats, not the other way around.

upvoted 0 times

Javier

3 months ago

Mozell: Exactly. It's all about managing and mitigating risks to keep our company's information system secure.

upvoted 0 times

...

Gianna

4 months ago

User 3: Agreed. By conducting a risk analysis, we can prioritize our security measures based on the potential impact of each threat.

upvoted 0 times

...

Mozell

4 months ago

User 2: That makes sense. It's important to understand the relationship between threats and risks in order to protect our information system.

upvoted 0 times

...

Chau

4 months ago

User 1: I think the answer is B. A risk analysis helps clarify which threats are relevant and what risks they involve.

upvoted 0 times

...