ISC2 HCISPP Exam - Topic 5 Question 72 Discussion

Actual exam question for ISC2's HCISPP exam

Question #: 72
Topic #: 5

A risk assessment report recommends upgrading all perimeter firewalls to mitigate a particular finding. Which of the following BEST supports this recommendation?

AThe inherent risk is greater than the residual risk.

BThe Annualized Loss Expectancy (ALE) approaches zero.

CThe expected loss from the risk exceeds mitigation costs.

DThe infrastructure budget can easily cover the upgrade costs.

Show Suggested Answer

Suggested Answer: A

by Dalene at Jul 09, 2023, 11:20 PM

Limited Time Offer

25%

Off

Get Premium HCISPP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Toi

3 months ago

Totally agree with C, it's all about cost-effectiveness!

upvoted 0 times

...

Tayna

3 months ago

B seems off, ALE approaching zero doesn't justify upgrades.

upvoted 0 times

...

Felicidad

4 months ago

Surprised that D is even an option, budget isn't everything!

upvoted 0 times

...

Rikki

4 months ago

I think A is more relevant here.

upvoted 0 times

...

Jacqueline

4 months ago

Definitely C, expected loss vs. costs makes sense.

upvoted 0 times

...

Jaleesa

4 months ago

I feel like the budget aspect is important, but it shouldn't be the main reason for upgrading firewalls. It seems too simplistic.

upvoted 0 times

...

Anika

4 months ago

I practiced a question where the expected loss had to outweigh the costs of mitigation. That sounds like it could be the right choice here.

upvoted 0 times

...

Dorothy

5 months ago

I think the ALE being close to zero might not be the best reason to upgrade. It seems like we need to focus on potential losses instead.

upvoted 0 times

...

Amber

5 months ago

I remember something about inherent vs. residual risk, but I'm not sure which one is more critical for justifying upgrades.

upvoted 0 times

...

Cortney

5 months ago

Hmm, this is a tricky one. I'll need to carefully review the options and think through the implications of each approach. I don't want to make any changes that could break the existing functionality.

upvoted 0 times

...

Delmy

5 months ago

Change Sets, that's definitely the way to go. I've used that approach before for similar deployments and it's worked well.

upvoted 0 times

...

Angella

5 months ago

I think single sign-on can reduce the risk of users writing down passwords, but I'm not totally sure how that works in practice.

upvoted 0 times

...

Sarah

10 months ago

Haha, the Annualized Loss Expectancy approaching zero? What is this, a game of Plinko?

upvoted 0 times

Margo

8 months ago

Haha, the Annualized Loss Expectancy approaching zero? What is this, a game of Plinko?

upvoted 0 times

...

Walton

8 months ago

C) The expected loss from the risk exceeds mitigation costs.

upvoted 0 times

...

Graham

8 months ago

A) The inherent risk is greater than the residual risk.

upvoted 0 times

...

Gertude

10 months ago

Hmm, I'm not sure the budget being able to cover the costs is the best justification. That's more of a practical consideration rather than a risk-based one.

upvoted 0 times

Ryann

9 months ago

C) The expected loss from the risk exceeds mitigation costs.

upvoted 0 times

...

Merilyn

9 months ago

B) The Annualized Loss Expectancy (ALE) approaches zero.

upvoted 0 times

...

Cecilia

10 months ago

A) The inherent risk is greater than the residual risk.

upvoted 0 times

...

Tawna

10 months ago

I agree, option C is the best answer. The cost-benefit analysis is key here - if the upgrade is cheaper than the potential losses, it's a smart investment.

upvoted 0 times

...

Kandis

10 months ago

The expected loss from the risk exceeding the mitigation costs seems like the most logical choice. Upgrading the firewalls is a no-brainer if it saves us money in the long run.

upvoted 0 times