MENU
Which of the following statements is true about residual risks
Suggested Answer: B
Get Premium ISSEP Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The types of cryptography defined by FIPS 185 are as follows:
Type I cryptography: It describes a cryptographic algorithm or a tool accepted by the National
Security Agency for protecting classified
information.
Type II cryptography: It describes a cryptographic algorithm or a tool accepted by the National
Security Agency for protecting
sensitive, unclassified information in the systems as stated in Section 2315 of Title 10, United States
Code, or Section 3502(2) of Title
44, United States Code.
Type III cryptography: It describes a cryptographic algorithm or a tool accepted as a Federal
Information Processing Standard.
Type III (E) cryptography: It describes a Type III algorithm or a tool that is accepted for export from
the United States.
36 comments · newest first
SA
Sabina
11 months ago
Totally agree with C, it’s all about what’s left after security measures!
SH
Shantell
11 months ago
Wait, is D really a thing? That seems off to me.
AM
Amie
11 months ago
A sounds right, threats and vulnerabilities go hand in hand.
LE
Leanna
11 months ago
I think B is misleading, it’s not just about weaknesses.
CA
Cassie
12 months ago
C is definitely true, residual risk is what’s left after controls.
ST
Stefany
12 months ago
I’m leaning towards A, but I’m not entirely confident. It seems like it could relate to both threats and vulnerabilities.
GR
Gregoria
12 months ago
I feel like I’ve seen a question like this before, and I think D was about risks before safeguards, so it can’t be right.
RE
Rene
1 year ago
I remember discussing vulnerabilities in class, but I’m not sure if that makes B correct. It feels a bit off.
HO
Hollis
1 year ago
I think residual risk refers to what’s left after all security measures are in place, so maybe C is the right answer?
CE
Ceola
1 year ago
The Greenhouse Gas Protocol seems like the most likely choice here, but I want to double-check the other options just to be sure.
SH
Shoshana
1 year ago
I'm a bit confused on this one. I'm not sure if the next state would be inIt or Get Transaction Data. I'll have to think it through step-by-step.
MA
Marquetta
1 year ago
Okay, let's think this through. The architect is responsible for the high-level design and ensuring the software meets its intended purpose, so I'd say C is definitely one of the right answers. And they also need to consider technical quality and implementation, so B seems like a good choice too.
DO
Dorian
1 year ago
Wait, is this a pop quiz or something? I thought we were just here to have a good time and learn about cybersecurity. Oh well, C it is!
LU
Lucia
1 year ago
D) It is the probabilistic risk before implementing all security measures.
TH
Therese
1 year ago
C) It is the probabilistic risk after implementing all security measures.
RO
Roslyn
1 year ago
B) It is a weakness or lack of safeguard that can be exploited by a threat.
BE
Bette
1 year ago
A) It can be considered as an indicator of threats coupled with vulnerability.
MA
Marion
1 year ago
D) It is the probabilistic risk before implementing all security measures.
TW
Twana
1 year ago
C) It is the probabilistic risk after implementing all security measures.
KI
Kirk
1 year ago
B) It is a weakness or lack of safeguard that can be exploited by a threat.
BU
Buddy
1 year ago
A) It can be considered as an indicator of threats coupled with vulnerability.
EL
Elza
1 year ago
Ha! This is a classic trick question. If you don't know the difference between residual risk and inherent risk, you're in trouble. I'm going with C.
EL
Elin
1 year ago
Hmm, that's an interesting perspective. I can see how both answers could be valid depending on the context.
SH
Shelia
1 year ago
I disagree, I believe the answer is C) It is the probabilistic risk after implementing all security measures.
EL
Elin
1 year ago
I think the answer is A) It can be considered as an indicator of threats coupled with vulnerability.
VA
Van
1 year ago
But wouldn't residual risks still exist even after implementing all security measures?
JO
Josue
2 years ago
Hmm, I'm not sure about that. I was thinking option D sounded more like the definition of residual risk. Guess I need to review my notes again.
DA
Dalene
1 year ago
User 2: I believe it's option C, the risk after all security measures.
VA
Vallie
1 year ago
User 1: I think option A is the correct statement.
ED
Edna
2 years ago
I disagree, I believe the answer is C) It is the probabilistic risk after implementing all security measures.
AN
Anika
2 years ago
I think option C is the correct answer. Residual risk is the probabilistic risk that remains after implementing all security measures.
LE
Leslie
1 year ago
It is important to consider residual risks even after implementing security measures.
ME
Melodie
1 year ago
Yes, you are right. Option C is the correct answer.
JE
Jeff
1 year ago
Residual risk is the probabilistic risk that remains after implementing all security measures.
LE
Leandro
1 year ago
I think option C is the correct answer.
VA
Van
2 years ago
I think the answer is A) It can be considered as an indicator of threats coupled with vulnerability.