IT Risk Fundamentals — IT Risk Fundamentals Certificate Enterprise Practice Questions

Which of the following is the BEST way to minimize potential attack vectors on the enterprise network?

• AA. Implement network log monitoring.
• BB. Disable any unneeded ports.
• CC. Provide annual cybersecurity awareness training.

When evaluating the current state of controls, which of the following will provide the MOST comprehensive analysis of enterprise processes, incidents, logs, and the threat environment?

• AA. Enterprise architecture (EA) assessment
• BB. IT operations and management evaluation
• CC. Third-party assurance review

An enterprise has initiated a project to implement a risk-mitigating control. Which of the following would provide senior management with the MOST useful information on the project's status?

• AA. Risk register
• BB. Risk heat map
• CC. Risk report