MENU
A security professional is assessing the risk in an application and does not take into account any mitigating or compensating controls. This type of risk rating is an example of which of the following?
Suggested Answer: B
Get Premium CISSP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
GE
Gearldine
11 months ago
I’m surprised they wouldn’t consider controls at all!
LE
Lennie
12 months ago
Seems pretty clear to me, it's inherent risk.
CA
Carri
12 months ago
Wait, are we sure it's not residual risk?
RO
Rosio
12 months ago
I agree, it has to be inherent risk!
AN
Andra
1 year ago
That's definitely inherent risk.
VA
Vallie
1 year ago
I feel like it could be inherent risk, but I also remember something about avoided risk being a different concept altogether.
WI
William
1 year ago
This question reminds me of a practice question where we discussed transferred risk, but I don't think that's the right answer here.
CA
Cary
1 year ago
I'm not entirely sure, but I remember something about residual risk being what’s left after controls are applied.
MA
Macy
1 year ago
I think this is about inherent risk since it refers to the risk present without any controls in place.
KR
Krystal
1 year ago
I'm a little confused by the wording of this question. Is it asking for the definition of gross margin or the calculation as a percentage of revenue? I'll have to read it again to make sure I understand what they're looking for.
LE
Lezlie
1 year ago
This seems like a tricky situation, but I think the key is to find a solution that works for the whole team. I'd probably try to get their input and see if we can come up with a collaborative plan.