Question: Which of the following techniques MOST clearly indicates whether specific risk-reduction controls should be implemented?
A.) Countermeasure cost-benefit analysis
B.) Penetration testing
C.) Frequent risk assessment programs
D.) Annual loss expectancy (ALE) calculation

Download pdf (with explanations) edition of this exam.