Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam 212-89 topic 1 question 8 discussion

Actual exam question from ECCouncil's 212-89
Question #: 8
Topic #: 1
[All 212-89 Questions]

A computer Risk Policy is a set of ideas to be implemented to overcome the risk associated with computer security incidents. Identify the procedure that is NOT part of the computer risk policy?

  • A. Procedure to identify security funds to hedge risk
  • B. Procedure to monitor the efficiency of security controls
  • C. Procedure for the ongoing training of employees authorized to access the system
  • D. Provisions for continuing support if there is an interruption in the system or if the system crashes
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
TheDeathStar
3 weeks, 5 days ago
Selected Answer: A
As per book answer is A
upvoted 2 times
...
s3curity01
1 year, 9 months ago
A doesn't even remotely mention insurance policy. its just identifying security funds to hedge risk. identify security funds isnt even related to computer risk policy
upvoted 4 times
...
Michela2020
2 years, 5 months ago
LETTER C.
upvoted 1 times
...
danny069
2 years, 7 months ago
Definitely the answer here is A. If you even look at the all answers without reading the question, A sticks out like it doesn't belong there.
upvoted 1 times
...
s3curity1
2 years, 8 months ago
This is letter A for me. A. Procedure to identify security funds to hedge risk - This is more on financial/business side. Security doesn't really govern them. B. Procedure to monitor the efficiency of security controls - Related to risks C. Procedure for the ongoing training of employees authorized to access the system - by providing ongoing training for employees authorized to access the system, you are teaching them what to do and what not to do. This lowers the risk of those users being part/triggering an incident. D. Provisions for continuing support if there is an interruption in the system or if the system crashes - related to availability
upvoted 3 times
...
tobesci
2 years, 10 months ago
I think the key is the word "computer" because it is not about human risks.
upvoted 2 times
s3curity1
2 years, 8 months ago
Computer security incidents always involves human
upvoted 1 times
...
...
SHS
3 years ago
Correct answer is C. Read the wording of question, it is asking about Risk and how do you hedge a risk, by taking insurance policy. So A is not the answer.
upvoted 2 times
khd45
2 months ago
C is not the correct Awnser. Training employees IS apart of risk as it reduces human error.
upvoted 1 times
...
...
chessDavis
3 years, 2 months ago
I think also the answer is A as budgeting is not part of the risk policy and security awareness training for employees accesing the coorporate computers and networks is very important to narrow the possibilities of human error or fall victim of cyber security scams
upvoted 1 times
...
Headtsg
3 years, 5 months ago
I think the answer is letter A
upvoted 3 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...