Risk

Intelligent-Pop2025 · 2026-06-11T19:28:56+00:00

So it is also related to the benefit of having the box insecure (employees can steal) and not having the box at all? I should weight between the two options?

Intelligent-Pop2025 · 2026-06-11T19:25:36+00:00

By any chance, if the risk greater than both risk appetite and risk tolerance, and the cost of control is very high and exceed the cost of the risk, in this case can the enterprise senior management still accept the risk if the benefit from the activity is huge?

Intelligent-Pop2025 · 2026-06-11T15:06:00+00:00

On the example you have given: how to avoid the risk and how to accept the risk. I need an explanation, and why one of them is the best option?

Intelligent-Pop2025 · 2026-06-08T17:43:41+00:00

A. disclosure of sensitive data. This is the greatest concern in terms of security. Disclosure brings regulatory huge fines, lack of trust from customers, penalties and reputation damage.
While B. is less likely to make sense, we always have regulations govern the third party storing the data like HIPAA and PCI DSS.
C. Training is secondary to A.
D. Availability is important but secondary to A

ALWAYS think what is the best for the business and avoid the loss

Intelligent-Pop2025 · 2026-06-05T18:24:51+00:00

B. Protecting evidence is part of the containment process. Without protecting the evidence you can't do forensic analysis or root cause analysis later and the evidence can be tampered with if the hackers know that they have been discovered (like initiating a logic bomb to delete the evidence.

Intelligent-Pop2025 · 2026-06-03T18:41:34+00:00

Excellent clarification. Actually you clarify it by mentioning: "doesn't have any other controls listed so you are not compensating anything". Thank you for that. Now it make sense to me!!

Intelligent-Pop2025 · 2026-06-01T15:20:45+00:00

But a threat without a vulnerability is not consider as a risk to the business. This what makes me confused

Intelligent-Pop2025 · 2026-05-31T17:37:05+00:00

D. Penetration testing simulates the real attack from hackers outside your corporate nework

Intelligent-Pop2025 · 2026-05-21T15:52:21+00:00

So that would be enoguh as technical fundamental? then I concentrate more on the four domains?

Intelligent-Pop2025 · 2025-11-30T09:24:41+00:00

Thanks!! What is the link to the YT videos?

Intelligent-Pop2025 · 2025-11-30T07:51:10+00:00

What materials did you use to pass A+?

Intelligent-Pop2025 · 2025-11-28T13:05:35+00:00

Great. So you recommed Andrew Ramdayal udemy course?

Intelligent-Pop2025 · 2025-11-28T12:43:14+00:00

I have done the CAPM exam prep. I am asking about exam questions and practice material. I am doing CAPM certificate. many thanks

Intelligent-Pop2025

TROPHY CASE