Risk Likelihood and Impact Scoring Quiz

1. Which metric in CVSS v3.1 measures the ease with which a vulnerability can be exploited?

Attack Complexity

Privileges Required

User Interaction

Scope

2. True or False: Impact assessment should consider both direct and indirect business consequences.

True

False

Submit

4. Which factor most directly affects the likelihood component of risk assessment?

Threat actor skill and resource availability

System age in years

Number of employees

Vendor support contracts

5. True or False: Remediation timelines should be based solely on vulnerability severity scores.

True

False

Submit

7. Which of the following indicates HIGH likelihood in threat assessment?

Active exploitation in the wild and known attack tools

Theoretical vulnerability with no known exploits

Vulnerability requires specialized hardware

Threat actor lacks motivation

8. True or False: A vulnerability affecting only non-critical systems should always have low impact.

True

False

9. When calculating risk, the formula Risk = Likelihood × Impact assumes which relationship?

Linear and multiplicative

Exponential

Logarithmic

No mathematical relationship

Submit

11. In risk assessment, what does the CVSS score primarily measure?

Vulnerability severity and exploitability

Network bandwidth consumed

Employee training effectiveness

Hardware replacement costs

12. True or False: Likelihood and impact are independent variables in risk assessment.

True

False

13. In a risk matrix, which quadrant represents low-likelihood, low-impact risks?

Lower-left

Upper-left

Upper-right

Lower-right

Submit

15. Which CVSS component describes how the vulnerability can be exploited?

Attack Vector

Confidentiality Impact

Integrity Impact

Availability Impact

16. True or False: A low-likelihood, high-impact risk can justify significant security investment.

True

False

Submit

18. Impact in risk scoring typically measures potential damage in terms of:

Financial loss, data compromise, and operational disruption

Employee morale only

Marketing budget allocation

Vendor contract terms

19. Which factor is most important when determining the likelihood of a threat occurring?

Threat actor capability and motivation

Employee job satisfaction

Office location

Hardware refresh cycle

Submit

Security Expert Scoring Risks by Likelihood and Impact Quiz

1. Which metric in CVSS v3.1 measures the ease with which a vulnerability can be exploited?

2.

What first name or nickname would you like us to use?

2. True or False: Impact assessment should consider both direct and indirect business consequences.

3. Risk ____ is the process of identifying and documenting assets vulnerable to threats.

4. Which factor most directly affects the likelihood component of risk assessment?

5. True or False: Remediation timelines should be based solely on vulnerability severity scores.

6. In risk scoring, the ____ component measures the consequence to data confidentiality.

7. Which of the following indicates HIGH likelihood in threat assessment?

8. True or False: A vulnerability affecting only non-critical systems should always have low impact.

9. When calculating risk, the formula Risk = Likelihood × Impact assumes which relationship?

10. Risk appetite refers to an organization's willingness to accept ____ in pursuit of objectives.

11. In risk assessment, what does the CVSS score primarily measure?

12. True or False: Likelihood and impact are independent variables in risk assessment.

13. In a risk matrix, which quadrant represents low-likelihood, low-impact risks?

14. Risk scoring models help security teams ____ vulnerabilities and threats.

15. Which CVSS component describes how the vulnerability can be exploited?

16. True or False: A low-likelihood, high-impact risk can justify significant security investment.

17. A vulnerability with high likelihood and high impact should receive ____ priority remediation.

18. Impact in risk scoring typically measures potential damage in terms of:

19. Which factor is most important when determining the likelihood of a threat occurring?

20. A risk matrix plots likelihood on one axis and ____ on the other.