ISC2 CISSP Exam - Topic 6 Question 19 Discussion

Actual exam question for ISC2's CISSP exam

Question #: 19
Topic #: 6

A security professional is assessing the risk in an application and does not take into account any mitigating or compensating controls. This type of risk rating is an example of which of the following?

ATransferred risk

BInherent risk

CResidual risk

DAvoided risk

Show Suggested Answer

Suggested Answer: B

by Lai at May 07, 2022, 02:37 PM

Limited Time Offer

25%

Off

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Gearldine

4 months ago

I’m surprised they wouldn’t consider controls at all!

upvoted 0 times

...

Lennie

4 months ago

Seems pretty clear to me, it's inherent risk.

upvoted 0 times

...

Carri

4 months ago

Wait, are we sure it's not residual risk?

upvoted 0 times

...

Rosio

4 months ago

I agree, it has to be inherent risk!

upvoted 0 times

...

Andra

5 months ago

That's definitely inherent risk.

upvoted 0 times

...

Vallie

5 months ago

I feel like it could be inherent risk, but I also remember something about avoided risk being a different concept altogether.

upvoted 0 times

...

William

5 months ago

This question reminds me of a practice question where we discussed transferred risk, but I don't think that's the right answer here.

upvoted 0 times

...

Cary

5 months ago

I'm not entirely sure, but I remember something about residual risk being what’s left after controls are applied.

upvoted 0 times

...

Macy

5 months ago

I think this is about inherent risk since it refers to the risk present without any controls in place.

upvoted 0 times

...

Krystal

5 months ago

I'm a little confused by the wording of this question. Is it asking for the definition of gross margin or the calculation as a percentage of revenue? I'll have to read it again to make sure I understand what they're looking for.

upvoted 0 times

...

Lezlie

5 months ago

This seems like a tricky situation, but I think the key is to find a solution that works for the whole team. I'd probably try to get their input and see if we can come up with a collaborative plan.

upvoted 0 times

...