1.

What is the definition of the Annual Loss Expectancy?
2.
What is the most important reason for applying segregation of duties?
3.
A non-human threat for computer systems is a flood. In which situation is a flood always a relevant threat?
 
4.
Why is compliance important for the reliability of the information?
5.
You are the owner of the courier company SpeeDelivery. On the basis of your risk analysis you have decided to take a number of measures. You have daily backups made of the server, keep the server room locked and install an intrusion alarm system and a sprinkler system. Which of these measures is a detective measure?
6.
What is the relationship between data and information?
7.
Which type of malware builds a network of contaminated computers?
8.
You work in the office of a large company. You receive a call from a person claiming to be from the Helpdesk. He asks you for your password. What kind of threat is this?
9.
You are a consultant and are regularly hired by the Ministry of Defense to perform analysis. Since the assignments are irregular, you outsource the administration of your business to temporary workers. You don't want the temporary workers to have access to your reports. Which reliability aspect of the information in your reports must you protect?
10.
You have a small office in an industrial areA. You would like to analyze the risks your company faces. The office is in a pretty remote location; therefore, the possibility of arson is not entirely out of the question. What is the relationship between the threat of fire and the risk of fire?