A.risk classification methods

B.risk-based capital allocation

C.risk culture

D.risk portfolio

A.Detect, recover, and attack

B.Prevent, respond, and log

C.Prevent, control, and attack

D.Prevent, recover, and detect

E.Explanation:
Controls are the policies, procedures, practices and guidelines designed to provide appropriate assurance that business objectives are achieved and undesired events are detected, prevented, and corrected. Controls, or countermeasures, will reduce or neutralize threats or vulnerabilities. Controls have three primary objectives: Prevent Recover Detect

A.Logs and system events

B.Penetration test reports

C.Vulnerability assessment reports

D.Intrusion detection system (IDS) rules

A.Certainty equivalent value

B.Risk premium

C.Risk value guarantee

D.Certain value assurance

E.Explanation:
The Certainty equivalent value is the expected guaranteed value of taking a risk. It is derived by
the uncertainty of the situation and the potential value of the situation's outcome.

F.is incorrect. The risk premium is the difference between the larger expected value of
the risk and the smaller certainty equivalent value.

A.Frequency of anti-virus software updates

B.Number of alerts generated by the anti-virus software

C.Percentage of IT assets with current malware definitions

D.Number of false positives detected over a period of time