1. You are creating objectives for your risk management plan. What do you NOT include at this stage?

		POAM
		list of threats
		cost-benefit analysis
		one or more reports

1. All of the following are steps involved in creating an affinity diagram, EXCEPT:

		brainstorming
		creating an affinity diagram
		gathering ideas into related groups
		identifying the problem

1. Microsoft Office Project is an example of project management software.

True

False

1. Costs for solutions are often ____________.

		overestimated
		underestimated
		high
		low

1. A critical path chart shows a list of project tasks that must be completed on time.

True

False

1. You use ________________ to communicate a risk and the resulting impact.

		risk management plans
		CBAs
		risk statements
		POAMs

1. POAMs are used to assign responsibility and allow management follow-up.

True

False

1. A(n) _____________ is a process used to determine how to manage risk.

		POAM
		cause and effect diagram
		Ishikawa diagram
		CBA

1. What is NOT a vulnerability that may affect a website for an online company?

		no firewall
		lack of protection from an intrusion detection system
		loss of Internet connectivity
		out of date antivirus software

1. Choose the most accurate statement with respect to creating a risk management plan.

		A risk management plan is simpler and more effective than a cost-benefit analysis.
		A risk management plan is an important document legally required to run an online business.
		A risk management plan eliminates threats to your business.
		A risk management plan can help ensure your business is in compliance with important regulations.

1. After you present your recommendations, the managers can ___________, ___________, or _____________ your recommendations.

		accept, modify, defer
		select, reject, pass
		implement, ignore, question
		buy, sell, hold

1. What information should you include in your report for management when you present your recommendations?

		findings, recommendation cost and time frame, and cost-benefit analysis
		recommendation, justification, and procedure
		affinity diagram, POAM, and CBA
		stakeholders, key stakeholders, and C-level stakeholders

1. In the findings section of your report to management where you present your recommendations, the cause is often an outage of some type.

True

False

1. When should you establish objectives for your risk management plan?

		after the project has started
		as early as possible
		before each workday
		figure it out as you go

1. ause and effect diagrams are used to link problems with causes.

True

False

1. Scope creep is an important tool that helps you to expand a project and allows risk management plans to adapt to changes.

True

False

1. What is the purpose of a POAM?

		assigning risk response procedures to stakeholders
		creating deadlines for risk response
		tracking risk response actions
		identifying vulnerabilities

1. In a POAM, an action is a scheduled event that indicates the completion of a task or group of tasks.

True

FalseA Gantt chart shows a project schedule.

True

False

POAM stands for _________.

		processes of accountable management
		plan of accurate mitigation
		procedures of accident management
		plan of action and milestones