Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

ISC2 HCISPP Exam - Topic 5 Question 72 Discussion

A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding. Which of the following BEST supports this recommendation?
A) The inherent risk is greater than the residual risk.
B) The Annualized Loss Expectancy (ALE) approaches zero.
C) The expected loss from the risk exceeds mitigation costs.
D) The infrastructure budget can easily cover the upgrade costs.

ISC2 HCISPP Exam - Topic 5 Question 72 Discussion

Actual exam question for ISC2's HCISPP exam
Question #: 72
Topic #: 5
[All HCISPP Questions]

A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding. Which of the following BEST supports this recommendation?

Show Suggested Answer Hide Answer
Suggested Answer: A

by Dalene at Jul 09, 2023, 11:20 PM

Limited Time Offer

25%

Off

Get Premium HCISPP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Toi
8 months ago
Totally agree with C, it's all about cost-effectiveness!
upvoted 0 times
...
Tayna
8 months ago
B seems off, ALE approaching zero doesn't justify upgrades.
upvoted 0 times
...
Felicidad
8 months ago
Surprised that D is even an option, budget isn't everything!
upvoted 0 times
...
Rikki
8 months ago
I think A is more relevant here.
upvoted 0 times
...
Jacqueline
9 months ago
Definitely C, expected loss vs. costs makes sense.
upvoted 0 times
...
Jaleesa
9 months ago
I feel like the budget aspect is important, but it shouldn't be the main reason for upgrading firewalls. It seems too simplistic.
upvoted 0 times
...
Anika
9 months ago
I practiced a question where the expected loss had to outweigh the costs of mitigation. That sounds like it could be the right choice here.
upvoted 0 times
...
Dorothy
9 months ago
I think the ALE being close to zero might not be the best reason to upgrade. It seems like we need to focus on potential losses instead.
upvoted 0 times
...
Amber
9 months ago
I remember something about inherent vs. residual risk, but I'm not sure which one is more critical for justifying upgrades.
upvoted 0 times
...
Cortney
9 months ago
Hmm, this is a tricky one. I'll need to carefully review the options and think through the implications of each approach. I don't want to make any changes that could break the existing functionality.
upvoted 0 times
...
Delmy
9 months ago
Change Sets, that's definitely the way to go. I've used that approach before for similar deployments and it's worked well.
upvoted 0 times
...
Angella
10 months ago
I think single sign-on can reduce the risk of users writing down passwords, but I'm not totally sure how that works in practice.
upvoted 0 times
...
Sarah
1 year ago
Haha, the Annualized Loss Expectancy approaching zero? What is this, a game of Plinko?
upvoted 0 times
Margo
1 year ago
Haha, the Annualized Loss Expectancy approaching zero? What is this, a game of Plinko?
upvoted 0 times
...
Walton
1 year ago
C) The expected loss from the risk exceeds mitigation costs.
upvoted 0 times
...
Graham
1 year ago
A) The inherent risk is greater than the residual risk.
upvoted 0 times
...
...
Gertude
1 year ago
Hmm, I'm not sure the budget being able to cover the costs is the best justification. That's more of a practical consideration rather than a risk-based one.
upvoted 0 times
Ryann
1 year ago
C) The expected loss from the risk exceeds mitigation costs.
upvoted 0 times
...
Merilyn
1 year ago
B) The Annualized Loss Expectancy (ALE) approaches zero.
upvoted 0 times
...
Cecilia
1 year ago
A) The inherent risk is greater than the residual risk.
upvoted 0 times
...
...
Tawna
1 year ago
I agree, option C is the best answer. The cost-benefit analysis is key here - if the upgrade is cheaper than the potential losses, it's a smart investment.
upvoted 0 times
...
Kandis
1 year ago
The expected loss from the risk exceeding the mitigation costs seems like the most logical choice. Upgrading the firewalls is a no-brainer if it saves us money in the long run.
upvoted 0 times
Marjory
1 year ago
User 2: Definitely, upgrading the firewalls is a smart investment.
upvoted 0 times
...
Casey
1 year ago
User 1: I agree, it's all about cost savings in the end.
upvoted 0 times
...
...
Junita
1 year ago
But upgrading the firewalls would reduce the expected loss from the risk, which exceeds the mitigation costs.
upvoted 0 times
...
Hermila
1 year ago
I disagree, I believe the answer is A.
upvoted 0 times
...
Junita
1 year ago
I think the answer is C.
upvoted 0 times
...
Alva
1 year ago
But upgrading the firewalls would reduce the expected loss from the risk, which exceeds the mitigation costs.
upvoted 0 times
...
Jade
1 year ago
I disagree, I believe the answer is A.
upvoted 0 times
...
Alva
1 year ago
I think the answer is C.
upvoted 0 times
...

Save Cancel