Isaca CRISC Practice Test - Questions Answers
List of questions
The acceptance of control costs that exceed risk exposure is MOST likely an example of:
Who is the MOST appropriate owner for newly identified IT risk?
Which of the following would be the BEST way to help ensure the effectiveness of a data loss prevention (DLP) control that has been implemented to prevent the loss of credit card data?
Calculation of the recovery time objective (RTO) is necessary to determine the:
The PRIMARY objective for selecting risk response options is to:
Which of the following is the MOST important consideration for a risk practitioner when making a system implementation go-live recommendation?
Which of the following would BEST help an enterprise prioritize risk scenarios?
Which of the following would be a risk practitioners BEST recommendation for preventing cyber intrusion?
Who should be accountable for ensuring effective cybersecurity controls are established?
A contract associated with a cloud service provider MUST include:
Question