The risk transference is referred to the transfer of risks to a third party, usually for a fee, it creates a contractual-relationship for the third party to manage the risk on behalf of the performing organization. Which one of the following is NOT an example of the transference risk response

A. Warranties

B. Performance bonds

C. Use of insurance

D. Life cycle costing

FIPS 199 defines the three levels of potential impact on organizations. Which of the following potential impact levels shows limited adverse effects on organizational operations, organizational assets, or individuals

A. Moderate

B. Medium

C. High

D. Low

The Chief Information Officer (CIO), or Information Technology (IT) director, is a job title commonly given to the most senior executive in an enterprise. What are the responsibilities of a Chief Information Officer Each correct answer represents a complete solution. Choose all that apply.

A. Proposing the information technology needed by an enterprise to achieve its goals and then working within a budget to implement the plan

B. Preserving high-level communications and working group relationships in an organization

C. Establishing effective continuous monitoring program for the organization

D. Facilitating the sharing of security risk-related information among authorizing officials

There are seven risk responses for any project. Which one of the following is a valid risk response for a negative risk event

A. Acceptance

B. Enhance

C. Share

D. Exploit

FIPS 199 defines the three levels of potential impact on organizations low, moderate, and high. Which of the following are the effects of loss of confidentiality, integrity, or availability in a high level potential impact

A. The loss of confidentiality, integrity, or availability might cause severe degradation in or loss of mission capability to an extent.

B. The loss of confidentiality, integrity, or availability might result in major financial losses.

C. The loss of confidentiality, integrity, or availability might result in a major damage to organizational assets.

D. The loss of confidentiality, integrity, or availability might result in severe damages like life threatening injuries or loss of life.