Objective 5.2: Explain elements of the risk management process
Practice questions for Security+ objective 5.2, “Explain elements of the risk management process.” Every question is original, written to the SY0-701 exam objectives, and comes with a full explanation — answer them below to see instant grading.
This objective sits in Domain 5.0: Security Program Management and Oversight, which is about 20% of the exam — so mastering it moves your readiness score meaningfully.
1.What does a risk heat map visually convey?
2.An organization's risk register contains a finding: its primary customer database is accessible to all employees in the customer service department (approximately 200 people) with read and write permissions, when analysis shows that only 15 employees actually need write access for their job functions. The remaining 185 have write access as a historical default. The risk committee reviews four proposed responses. Which risk response option does each proposal represent, and which is most aligned with security best practices for this specific finding?
3.A risk analyst is evaluating two proposed security investments for budget prioritization. Investment A costs $120,000 and would reduce the Annual Loss Expectancy of a data breach risk from $340,000 to $95,000. Investment B costs $75,000 and would reduce the Annual Loss Expectancy of a ransomware risk from $210,000 to $80,000. The organization can only fund one investment this budget cycle. Which metric should the analyst calculate to compare the two investments on a standardized basis, and which investment produces the superior result on that metric?
4.An organization's leadership determines that they are willing to accept up to $50,000 in annual losses from cybersecurity incidents before requiring additional controls. This $50,000 figure BEST represents which concept?
5.Risk control self-assessment (RCSA) differs from a traditional risk control assessment in that it:
Practice every objective, adaptively
CertBench tracks your score on 5.2 and every other objective, then builds a daily plan that targets your weakest spots. Start with the free diagnostic.