MENU
A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding. Which of the following BEST supports this recommendation?
Suggested Answer: A
Get Premium HCISPP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
30 comments · newest first
TO
Toi
11 months ago
Totally agree with C, it's all about cost-effectiveness!
TA
Tayna
11 months ago
B seems off, ALE approaching zero doesn't justify upgrades.
FE
Felicidad
11 months ago
Surprised that D is even an option, budget isn't everything!
RI
Rikki
11 months ago
I think A is more relevant here.
JA
Jacqueline
12 months ago
Definitely C, expected loss vs. costs makes sense.
JA
Jaleesa
12 months ago
I feel like the budget aspect is important, but it shouldn't be the main reason for upgrading firewalls. It seems too simplistic.
AN
Anika
12 months ago
I practiced a question where the expected loss had to outweigh the costs of mitigation. That sounds like it could be the right choice here.
DO
Dorothy
1 year ago
I think the ALE being close to zero might not be the best reason to upgrade. It seems like we need to focus on potential losses instead.
AM
Amber
1 year ago
I remember something about inherent vs. residual risk, but I'm not sure which one is more critical for justifying upgrades.
CO
Cortney
1 year ago
Hmm, this is a tricky one. I'll need to carefully review the options and think through the implications of each approach. I don't want to make any changes that could break the existing functionality.
DE
Delmy
1 year ago
Change Sets, that's definitely the way to go. I've used that approach before for similar deployments and it's worked well.
AN
Angella
1 year ago
I think single sign-on can reduce the risk of users writing down passwords, but I'm not totally sure how that works in practice.
SA
Sarah
1 year ago
Haha, the Annualized Loss Expectancy approaching zero? What is this, a game of Plinko?
MA
Margo
1 year ago
Haha, the Annualized Loss Expectancy approaching zero? What is this, a game of Plinko?
WA
Walton
1 year ago
C) The expected loss from the risk exceeds mitigation costs.
GR
Graham
1 year ago
A) The inherent risk is greater than the residual risk.
GE
Gertude
1 year ago
Hmm, I'm not sure the budget being able to cover the costs is the best justification. That's more of a practical consideration rather than a risk-based one.
RY
Ryann
1 year ago
C) The expected loss from the risk exceeds mitigation costs.
ME
Merilyn
1 year ago
B) The Annualized Loss Expectancy (ALE) approaches zero.
CE
Cecilia
1 year ago
A) The inherent risk is greater than the residual risk.
TA
Tawna
1 year ago
I agree, option C is the best answer. The cost-benefit analysis is key here - if the upgrade is cheaper than the potential losses, it's a smart investment.
KA
Kandis
1 year ago
The expected loss from the risk exceeding the mitigation costs seems like the most logical choice. Upgrading the firewalls is a no-brainer if it saves us money in the long run.
MA
Marjory
1 year ago
User 2: Definitely, upgrading the firewalls is a smart investment.
CA
Casey
1 year ago
User 1: I agree, it's all about cost savings in the end.
JU
Junita
1 year ago
But upgrading the firewalls would reduce the expected loss from the risk, which exceeds the mitigation costs.
HE
Hermila
2 years ago
I disagree, I believe the answer is A.
JU
Junita
2 years ago
I think the answer is C.
AL
Alva
2 years ago
But upgrading the firewalls would reduce the expected loss from the risk, which exceeds the mitigation costs.
JA
Jade
2 years ago
I disagree, I believe the answer is A.
AL
Alva
2 years ago
I think the answer is C.