350-201 Question 26
Select 3You are conducting a risk analysis for a financial institution's online banking platform. During the analysis, you identify that the platform contains sensitive customer data, has outdated encryption protocols, and is frequently targeted by phishing campaigns. Which combination of elements best describes the risk analysis in this scenario?
- A
The sensitive customer data represents an asset.
- B
The outdated encryption protocols represent a vulnerability.
- C
The phishing campaigns represent a threat.
- D
The outdated encryption protocols represent an asset.
- E
The sensitive customer data represents a threat.
Show answer and explanation
Correct answers: A, B, C
Explanation
A proper risk analysis involves identifying the asset (sensitive customer data), the vulnerability (outdated encryption protocols), and the threat (phishing campaigns). These three elements work together to define the overall risk to the online banking platform. Understanding their roles is critical in determining the potential impact and likelihood of a security incident.
- A. Correct.
Sensitive customer data is considered an asset because it holds value to the organization and requires protection.
- B. Correct.
Outdated encryption protocols are a vulnerability because they represent a weakness that can be exploited by attackers.
- C. Correct.
Phishing campaigns are considered a threat because they represent a potential source of harm to the online banking platform.
- D. Incorrect.
This is incorrect because vulnerabilities refer to weaknesses, not assets. Outdated encryption protocols are not an asset.
- E. Incorrect.
This is incorrect because sensitive customer data is not a threat; it is the asset being protected from threats like phishing campaigns.