Which of the Following Is NOT a Valid Rule of Thumb

question 43

Multiple Choice

Which of the following is NOT a valid rule of thumb on risk control strategy selection?

• A) When a vulnerability exists: Implement security controls to reduce the likelihood of a vulnerability being exploited.
• B) When a vulnerability can be exploited: Apply layered protections, architectural designs, and administrative controls to minimize the risk or prevent the occurrence of an attack.
• C) When the attacker's potential gain is less than the costs of attack: Apply protections to decrease the attacker's cost or reduce the attacker's gain, by using technical or operational controls.
• D) When the potential loss is substantial: Apply design principles, architectural designs, and technical and non-technical protections to limit the extent of the attack, thereby reducing the potential for loss.

---

Definitions:

Equity

The idea of equality and rightfulness in allocating wealth, chances, and advantages among members of a community.

Voice

The ability or right to express opinions, concerns, or proposals, especially in the context of organizational or democratic processes.

Management Practices

The approaches, techniques, and strategies used by managers to run organizations, including decision-making, leadership, and personnel management.

Workplace Conflict

Arises when there is a disagreement or tension between individuals or groups in a work setting, often due to differences in opinion, goals, or values.