A business unit is updating a risk register with assessment results for a key project. Which of the following is MOST important to capture in the register?

Action plans to address risk scenarios requiring treatment

The methodology used to perform the risk assessment

Action plans to address risk scenarios requiring treatment

Date and status of the last project milestone

The individuals assigned ownership of controls

During the creation of an organization's IT risk management program, the BEST time to identify key risk indicators (KRIs) is while:

Developing a risk monitoring process

Reviewing risk response plans with internal audit

Developing a risk monitoring process

Reviewing an external risk assessment

An organization has adopted an emerging technology without following proper processes. Which of the following is the risk practitioner's BEST course of action to address this risk?

Conduct a risk assessment to determine risk exposure.

Accept the risk because the technology has already been adopted.

Propose a transfer of risk to a third party with subsequent monitoring.

Conduct a risk assessment to determine risk exposure.

Recommend to senior management to decommission the technology.

Which of the following BEST reduces the likelihood of fraudulent activity that occurs through use of a digital wallet?

Require multi-factor authentication (MFA) to access the digital wallet.

Use a digital key to encrypt the contents of the wallet.

Enable audit logging on the digital wallet's device.

Require public key infrastructure (PKI) to authorize transactions.

A risk practitioner has been notified of a social engineering attack using artificial intelligence (AI) technology to impersonate senior management personnel. Which of the following would BEST mitigate the impact of such attacks?

Training and awareness of employees for increased vigilance

Subscription to data breach monitoring sites

Suspension and takedown of malicious domains or accounts

Increased monitoring of executive accounts

Training and awareness of employees for increased vigilance

Which of the following is the MOST important aspect of a key risk indicator (KRI)?

The KRI has a high probability of predicting a future risk event.

The KRI measures the volume of risk events.

The KRI has a high probability of predicting a future risk event.

The KRI contains qualitative measures to enable reporting.

The KRI provides metric data for reporting.

Which of the following will help ensure the effective decision-making of an IT risk management committee?

The committee is comprised of key stakeholders.

The committee charter is approved by the board.

Approved minutes are forwarded to senior management.

The committee is comprised of key stakeholders.

Which of the following would be the GREATEST risk associated with a new implementation of single sign-on?

Complex security administration

Inability to access key information

User resistance to single sign-on

Which of the following should be the PRIMARY consideration for assigning risk mitigation responsibility?

Detailed knowledge of business operations

Ability to allocate resources to address risk

Ability to communicate directly to senior management

Detailed knowledge of business operations

When creating a program to manage data privacy risk, which of the following is MOST important to ensure that the program is successful?

Alignment with applicable legal and regulatory requirements

Adoption of mission and vision statements

Alignment with applicable legal and regulatory requirements

Compliance with industry frameworks

Approval of mitigating and compensating controls

Isaca CRISC Practice Test 40 - Free Online Exam Prep & Questions

Concerned about system load capabilities during the month-end close process, management requires monitoring of the average time to complete tasks and monthly reporting of the findings. What type of measure has been established?

Become a Premium Member for full access

Unlock Premium Member

Isaca CRISC Practice Test 40

Question

Isaca CRISC Practice Tests

Practice Tests