MENU
Which activity below is NOT included in the information security risk assessment process?
Suggested Answer: C
Get Premium ISO-IEC-27005-Risk-Manager Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The information security risk assessment process, as outlined in ISO/IEC 27005, typically includes identifying risks, assessing their potential impact, and prioritizing them. However, selecting risk treatment options is not part of the risk assessment process itself; it is part of the subsequent risk treatment phase. Therefore, option C is the correct answer as it is not included in the risk assessment process.
40 comments · newest first
GA
Gaynell
10 months ago
I’m surprised that’s even a question!
SH
Shoshana
11 months ago
Yeah, I agree with Adolph, treatment options are key.
KE
Keneth
11 months ago
Wait, selecting treatment options isn't included? That seems off.
AD
Adolph
11 months ago
I think prioritizing risks is crucial too.
JO
Joanna
11 months ago
Risk identification is definitely part of the process.
IV
Ivette
12 months ago
Honestly, I’m a bit confused. I thought all three were part of risk assessment, but maybe one is more about treatment than assessment?
BO
Bonita
12 months ago
I feel like selecting risk treatment options is also a key part of the process. I’m leaning towards A being the one that doesn’t fit.
LA
Laila
12 months ago
I remember practicing a similar question where we had to identify steps in risk management. I think prioritizing risks is essential, so it might not be the answer.
XE
Xenia
1 year ago
I think the risk identification approach is definitely part of the process, but I'm not entirely sure about the other options.
ST
Stefanie
1 year ago
Hmm, I'm pretty confident that B is the correct answer here. Prioritizing risks for treatment is a critical part of the risk assessment process, so that can't be the step that's missing.
IL
Ilona
1 year ago
I'm a bit confused on this one. All of these activities seem like they would be part of a comprehensive risk assessment. I'll have to think it through carefully to figure out which one is the odd one out.
LA
Lashawnda
1 year ago
I've reviewed the risk assessment steps before, so I think I've got this. The answer has to be A - determining the risk identification approach, since that's more of a planning step rather than part of the actual assessment.
SH
Sharen
1 year ago
Okay, let's see. Determining the risk identification approach, prioritizing risks, and selecting risk treatment options - those all seem like key parts of the process. I'm not sure which one is missing.
GR
Grover
1 year ago
Hmm, this looks like a tricky one. I'll need to think carefully about the risk assessment process to figure out which step is not included.
NI
Nickie
1 year ago
I remember studying different types of experiments and I'm pretty sure this is about factorial experiments because they test all levels of both factors.
WI
William
2 years ago
This question is a real head-scratcher. Maybe the exam writers are trying to catch us off guard, like a bunch of mischievous hackers.
AL
Alida
2 years ago
C) Selecting information security risk treatment options
GE
Geraldo
2 years ago
B) Prioritizing risks for risk treatment
CA
Carmen
2 years ago
A) Determining the risk identification approach
YO
Yolande
2 years ago
Wait, is this a trick question? I feel like they're all included in the risk assessment process. Someone should tell the exam writers to get their facts straight.
MA
Marshall
2 years ago
I think B) Prioritizing risks for risk treatment is also a valid option to consider.
KI
Kimberely
2 years ago
Prioritizing risks and selecting treatment options? That's the fun part! I bet option A is the correct answer.
LU
Lucina
2 years ago
It's important to understand the different activities involved in the risk assessment process.
SH
Shonda
2 years ago
Yes, you're right. Option A is the correct answer.
LE
Lea
2 years ago
I think option A, determining the risk identification approach, is not included in the information security risk assessment process.
VE
Veronica
2 years ago
Yes, you're right! Option A is NOT included in the information security risk assessment process.
FL
Fletcher
2 years ago
I agree, prioritizing risks and selecting treatment options is definitely the fun part.
CA
Carissa
2 years ago
I think option A is the correct answer, determining the risk identification approach.
DA
Danica
2 years ago
I agree, prioritizing risks and selecting treatment options is definitely the fun part!
DE
Dean
2 years ago
I agree with Socorro, C) Selecting information security risk treatment options seems like the odd one out.
AN
Antonio
2 years ago
I'm going to go with option A. I mean, how can you assess risks without first knowing how to identify them? Seems like a no-brainer to me.
MA
Marisha
2 years ago
All of these activities are essential for a comprehensive information security risk assessment.
PA
Patti
2 years ago
True, selecting treatment options is also a key step in the process.
LA
Lanie
2 years ago
But don't forget about prioritizing risks for treatment, that's important too.
GE
Geoffrey
2 years ago
I agree, identifying risks is crucial for the assessment process.
JO
Jose
2 years ago
I disagree, I believe the answer is A) Determining the risk identification approach.
VO
Von
2 years ago
Hmm, I'm pretty sure determining the risk identification approach is part of the assessment process. This question is trickier than it seems.
EM
Emeline
2 years ago
B) Prioritizing risks for risk treatment
YU
Yuki
2 years ago
A) Determining the risk identification approach
SO
Socorro
2 years ago
I think the answer is C) Selecting information security risk treatment options.