Sure Aliah! This is the English Version for scenario-based answers.
Use this "Signal Table" to find the answer and the exact English sentences for your explanation.
If you see this Signal... | The Term is... | The English Explanation (Write this!) |
|---|---|---|
"Spreading" or "Hacker is inside" | Containment | 1. It is to stop the attack from spreading to other systems. |
"Remove malware" or "Delete virus" | Eradication | 1. It is to remove the root cause of the attack. |
"Personal Data" or "Customer info" | PDPA | 1. It is a law to protect personal data in Malaysia. |
"List weaknesses" or "Passive scan" | Vulnerability Assessment (VA) | 1. It is a passive scan to find and list weaknesses. |
"Buy Insurance" or "Outsource" | Transfer | 1. It is to share the risk with a third party. |
"Install Firewall" or "Reduce risk" | Mitigate | 1. It is to reduce the risk of an attack. |
If the question asks: "Propose a solution for the scenario and explain why."
Aliah, follow this structure:
Solution: [Term from the table above].
Explanation 1: [Definition from the table].
Explanation 2: "It is to protect CIA and reduce risk to the company."
"Company X has limited budget for IT security but they are worried about money loss if a server is hacked. They decided to buy Cyber Insurance."
Question: Identify the risk treatment and explain why.
Aliah's Answer:
Term: Transfer.
Explanation: The company is sharing the risk with an insurance company Saved assistant message 2026-06-24 01:18.
Purpose: This is to reduce financial loss and protect the company from high risks.
Does this English version make it easier for you to prepare for the exam, Aliah?