ExamQuestions.com

Register
Login
Information Systems Security Engineering Professional (CISSP-ISSEP) Exam Questions

ISC

Information Systems Security Engineering Professional (CISSP-ISSEP)

26 / 120

Question 26:

Which of the following statements is true about residual risks 

Answer options:

A. It can be considered as an indicator of threats coupled with vulnerability.
B. It is a weakness or lack of safeguard that can be exploited by a threat.
C. It is the probabilistic risk after implementing all security measures.
D. It is the probabilistic risk before implementing all security measures.