Business services and cyber risk Review questions Integrated synthesis: Business services and cyber risk This module connects a business-service outcome to the assets, data, people and suppliers that enable it, then converts that understanding into reviewable risk scenarios. Learners map dependency direction, estimate time-based business impact, build a purpose-bounded threat model, and verify that each scenario states cause, event and consequence rather than a list of concerns. They also apply treatment and exception choices with an owner, expiry and exit indicator. The outputs are a service map, impact analysis, risk register and treatment decision that a service owner can review without false precision or unauthorized risk acceptance.
Review questions Test your understanding with these questions. Marking and saved results are available with a free account.
Question 1 A team defines the order service as 'the server and application,' although messaging, an external warehouse and the price file are required to complete an order. What should be corrected first? Add every company device to scope Define the service outcome and map each step and dependency Classify the server as critical because it is technical Wait for an incident to reveal dependencies Question 2 The map labels the messaging supplier 'critical' but does not show what happens when it fails. Which evidence completes the judgment? The supplier's reliability slogan The number of IT staff Time-based service effect and a tested fallback Annual contract price alone Question 3 Payments failed after an authentication-key rotation while the rest of the service works. Which next evidence distinguishes dependency direction? Add servers and watch the overall average Correlate authentication-request and payment-gateway failure timestamps for the same transaction ID Accept the old service map without tracing a transaction Restart every component before preserving logs Question 4 A risk register says only 'phishing is high.' Which rewrite creates a usable scenario? Because phishing-resistant authentication is absent, a finance identity may be stolen, payment data changed and disbursement delayed Change the color to red without detail Buy training and close the risk Write 'human risk' and assign it to everyone Question 5 Two scenarios score 12. One may stop tonight's financial close; the other concerns a project six months away. What should the specialist do? Treat them identically because scores match Double the first score without a defined rule Delete the second scenario Show urgency, confidence and alternatives separately and justify the first priority Question 6 Two scenarios have the same financial impact: an exposed persistent supplier account without MFA has recent attempts, while a disabled account is on a segmented network. What is the sounder priority? Equal, because impact alone determines likelihood The disabled account, because its record is older The persistent account, because exposure and attempts support path likelihood Buy a tool before comparing prerequisites Question 7 What correctly distinguishes restoration time from recovery point? Both are one elapsed-time limit for the process The first limits service restoration duration; the second limits acceptable age of lost data Restoration time sets acceptable data loss, while recovery point sets service-return duration There is no difference; either term can replace the other in recovery decisions Question 8 A workaround handles 40 orders per hour, 95 orders arrive per hour, and initial backlog is zero. What is backlog after two hours? 55 orders, using only one hour of net arrivals 80 orders, multiplying workaround capacity by two hours 110 orders: (95−40)×2 with zero initial backlog 190 orders, multiplying arrivals by two and ignoring processing Question 9 What makes a tampering hypothesis testable? Declaring it occurred Stating prerequisite, path, consequence and required evidence Labeling it high Buying a tool Question 10 If a scenario remains unchanged after its prerequisite is removed, what is wrong? The cause is underspecified Evidence is complete The consequence vanished The model is accredited Question 11 Twelve of fifteen accounts are covered. How many accounts remain outside the control? 0 3 12 15 Question 12 What prevents an exception becoming permanent acceptance? A long exception record without due date or owner Expiry, exit indicator, owner, and closure test An email copy proving only that the team read the request Lowering severity while exposure remains uncompensated Create a free account to mark your answers and save your progress.
