ISC2 ISSEP Exam - Topic 4 Question 74 Discussion

Actual exam question for ISC2's ISSEP exam

Question #: 74
Topic #: 4

Which of the following are the major tasks of riskmanagement? Each correct answer represents acomplete solution. Choose two.

ARiskidentification

BBuilding Risk free systems

CAssuring the integrity of organizational data

DRisk control

Show Suggested Answer

Suggested Answer: A, D

The following are the two major tasks of risk management:

1.Risk identification

2.Risk control

Risk identification is the task of examining and documenting the security posture of an organization's

information technology and the risks it

faces.

Risk control is the task of applying controls to reduce risks to an organization's data and information

systems.

Answer options B and C are incorrect. Building risk free systems and assuring the integrity of

organizational data are the tasks related to the

implementation of security measures.

by Thurman at Oct 06, 2023, 03:41 AM

Limited Time Offer

25%

Off

Get Premium ISSEP Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Christiane

3 months ago

Not sure about D, seems too vague to me.

upvoted 0 times

...

Cassie

3 months ago

A and D are spot on, no doubt about it.

upvoted 0 times

...

Wava

4 months ago

Building risk-free systems? That sounds impossible!

upvoted 0 times

...

Kiley

4 months ago

I think C is super important too, though.

upvoted 0 times

...

Wai

4 months ago

Definitely A and D! Those are key tasks.

upvoted 0 times

...

Luis

4 months ago

I thought building risk-free systems was more of a goal than a task in risk management. I’m leaning towards risk identification and risk control as the correct answers.

upvoted 0 times

...

Peggie

4 months ago

I feel like we had a practice question similar to this, and I think risk control was one of the answers. Not sure about the other one though.

upvoted 0 times

...

Bok

4 months ago

I think risk identification is definitely one of the major tasks, but I'm a bit confused about the second choice. Was it risk control or something else?

upvoted 0 times

...

Merrilee

5 months ago

I remember we discussed risk identification and risk control in class, but I'm not entirely sure if both are the right answers here.

upvoted 0 times

...

Lorrie

5 months ago

Okay, I've got this. The major tasks are risk identification and risk control. Assuring data integrity is important, but not one of the core risk management responsibilities. I'll go with A and D.

upvoted 0 times

...

Hubert

5 months ago

Building risk-free systems sounds like a great goal, but I'm not sure that's a realistic task of risk management. I think the key tasks are identifying risks and then controlling or mitigating them.

upvoted 0 times

...

Johnetta

5 months ago

Hmm, I'm a bit unsure about this one. I know risk management is important, but I'm not totally clear on the specific tasks involved. I'll have to think this through carefully.

upvoted 0 times

...

Ryann

5 months ago

This seems straightforward - I think the major tasks of risk management are risk identification and risk control, so I'll select those two options.

upvoted 0 times

...

Titus

5 months ago

Hmm, this looks like a tricky one. I'll need to carefully read through the options and think about how the different approaches might work with the given scenario.

upvoted 0 times

...

Delmy

5 months ago

Okay, I've got this. The key is to focus on the customer's needs, not just making the sale. That's the difference between transactional and consultative sales.

upvoted 0 times

...

Mayra

5 months ago

This question seems pretty straightforward. I think the key is to focus on the "respond" part of the privacy operational lifecycle and consider what that might entail.

upvoted 0 times

...

Lashaunda

5 months ago

Ugh, I'm totally lost on this one. ZFS options are not my strong suit. I'll have to guess and hope for the best.

upvoted 0 times

...