SSCP Risk Identification, Monitoring, and Analysis Practice Question
During a qualitative risk analysis, an organization assesses a threat of a data breach due to weak encryption. The likelihood is rated as 'Medium' and the impact as 'High'. According to a standard 3x3 risk matrix, what is the overall risk rating?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
High
In a typical 3x3 risk matrix, a combination of Medium likelihood and High impact results in a High risk rating.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Medium
Why it's wrong here
Medium would require, for example, Medium likelihood and Medium impact.
- ✓
High
Why this is correct
Medium likelihood and High impact typically map to High risk.
- ✗
Low
Why it's wrong here
Low would require both likelihood and impact to be low.
- ✗
Critical
Why it's wrong here
Critical usually results from High/High or Extreme combinations.
Go deeper
Related to this question
About these practice questions
One of 920 original SSCP practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SSCP practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SSCP exam.