Câu 10: EX0-105: Information Security Foundation based on ISOIEC 27002

A well executed risk analysis provides a great deal of useful information. A risk analysis has four main objectives. What is not one of the four main objectives of a risk analysis?

1. A. Identifying assets and their value
2. B. Determining the costs of threats — đáp án hiện tại
3. C. Establishing a balance between the costs of an incident and the costs of a security measure
4. D. Determining relevant vulnerabilities and threats