Which of the Following Is NOT a Valid Rule of Thumb

question 33

Multiple Choice

Which of the following is NOT a valid rule of thumb on risk control strategy selection?

• A) When a vulnerability exists: Implement security controls to reduce the likelihood of a vulnerability being exercised.
• B) When a vulnerability can be exploited: Apply layered protections, architectural designs, and administrative controls to minimize the risk or prevent the occurrence of an attack.
• C) When the attacker's potential gain is less than the costs of attack: Apply protections to decrease the attacker's cost or negate the attacker's gain, by using technical or operational controls.
• D) When the potential loss is substantial: Apply design principles, architectural designs, and technical and non-technical protections to limit the extent of the attack, thereby reducing the potential for loss.

---

Definitions:

Policy Change

A policy change refers to alterations made to existing laws, regulations, or guidelines by governments, institutions, or organizations, aiming to address specific issues or improve outcomes.

Loanable Funds

The funds available in the financial markets for borrowing, influenced by interest rates, savings, and investments.

Exchange Rate

The price of one currency expressed in terms of another.

Net Capital

The difference between a firm's total assets and its total liabilities, essentially representing the owner's equity.