ISC2 CAP Exam - Topic 6 Question 60 Discussion

Actual exam question for ISC2's CAP exam

Question #: 60
Topic #: 6

[All CAP Questions]

You work as a project manager for BlueWell Inc. You with your team are using a method or a (technical) process that conceives the risks even if all theoretically possible safety measures would be applied. One of your team member wants to know that what is a residual risk. What will you reply to your team member?

AIt is a risk that remains because no risk response is taken.

BIt is a risk that remains after planned risk responses are taken.

CIt is a risk that cannot be addressed by a risk response.

DIt is a risk that will remain no matter what type of risk response is offered.

Show Suggested Answer

Suggested Answer: B

by Talia at Dec 11, 2022, 05:18 AM

Limited Time Offer

25%

Off

Get Premium CAP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Kati

4 months ago

Yeah, it’s like the leftover risk after all our safety measures.

upvoted 0 times

...

Kimberely

4 months ago

Wait, so we can never get rid of all risks? That sounds risky!

upvoted 0 times

...

Azzie

4 months ago

I thought residual risk meant no response was taken at all?

upvoted 0 times

...

Reita

4 months ago

Totally agree, it’s the risk we can’t fully eliminate!

upvoted 0 times

...

Lynna

4 months ago

Residual risk is what’s left after we try to manage risks.

upvoted 0 times

...

Trina

5 months ago

I’m a bit confused. Isn’t residual risk just any risk that still exists? I thought it could be any of these options, but I’m leaning towards D.

upvoted 0 times

...

Sanda

5 months ago

I practiced a question like this before, and I think it was about risks that remain even after responses are implemented. So, B sounds right to me.

upvoted 0 times

...

Hyun

5 months ago

I’m not entirely sure, but I remember something about risks that can’t be eliminated completely. Maybe that’s option C?

upvoted 0 times

...

Alecia

5 months ago

I think residual risk is what’s left after we’ve done everything we can to mitigate it, so I’d lean towards option B.

upvoted 0 times

...

Lamonica

5 months ago

Hmm, I'm a bit unsure about this one. I'll need to review my notes on the Act to see who is responsible for grievance redressal.

upvoted 0 times

...

Sharmaine

5 months ago

This looks like a straightforward question about the types of event reports available from an Activity Report. I'll carefully read through the options and select the two that are correct.

upvoted 0 times

...

Carrol

5 months ago

I'm pretty confident it may not be option C because it deals more with mid-call signaling. I need to review the commands again.

upvoted 0 times

...