CHAPTER 15 Which of the following threats would be classified as the actions of a hactivist? Which of these is NOT a response to risk? Which of the following is NOT a threat classification category? In which of the following threat classifications would a power blackout be classified? Which of the following approaches to risk calculation typically assigns a numeric value (1–10) or label (High, Medium, or Low) to represent a risk? What is a list of potential threats and associated risks? Giovanni is completing a report on risks. To which risk option would he classify the action that the organization has decided not to construct a new data center because it would be located in an earthquake zone? Which of the following control categories includes conducting workshops to help users resist phishing attacks? Emiliano needs to determine the expected monetary loss every time a risk occurs. Which formula will he use? Enzo is reviewing the financial statements and has discovered a serious misstatement. What type of risk has he found? Simona needs to research a control that attempts to discourage security violations before they occur. Which control will she research? Which of the following data types has the highest level of data sensitivity? Sergio has been asked to make a set of data that was once restricted now available to any users. What data type will Sergio apply to this set of data? Which of the following uses data anonymization? Which of the following is NOT true about data sovereignty? Bob needs to create an agreement between his company and a third-party organization that demonstrates a “convergence of will” between the parties so that they can work together. Which type of agreement will Bob use? External threat Resistance Compliance Operational risks Quantitative risk calculation A risk register Avoidance Operational controls SLE Control risk Deterrent control Confidential Public Data masking Governments cannot force companies to store data within specific countries. MOU