Section: Volume D

Section: Volume D
Explanation/Reference:

Section: Volume A
Explanation:
The principles of access controls focus on availability, integrity, and confidentiality, as loss or danger is directly related to these three:
* Loss of confidentiality- Someone sees a password or a company's secret formula, this is referred to as loss of confidentiality.
* Loss of integrity- An e-mail message is modified in transit, a virus infects a file, or someone makes unauthorized changes to a Web site is referred to as loss of integrity.
* Loss of availability- An e-mail server is down and no one has e-mail access, or a file server is down so data files aren't available comes under loss of availability.

Explanation/Reference:
Explanation:
The cost of the project is not an indicator of risk urgency. The affect of the risk on the overall cost of the project may be considered, but it is not the best answer.
Incorrect Answers:
A: Warning signs are an indicator of the risk urgency.
B: Symptoms are an indicator of the risk urgency.
C: The risk rating can be an indicator of the risk urgency.

Explanation/Reference:
Explanation:
The low probability and low impact risks should be added to a watchlist for future monitoring.
Incorrect Answers:
A: The risk response for these events may be to accept them, but the best answer is to first add them to a watchlist.
C: Risks are not dismissed; they are at least added to a watchlist for monitoring.
D: While the risks may eventually be added to the register, the best answer is to first add them to the watchlist for monitoring.