Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 106

Question list

List of questions

Question 1051

(0)

Which of the following should be the FIRST consideration when establishing a new risk governance program?

Question 1052

(0)

When establishing an enterprise IT risk management program, it is MOST important to:

Question 1053

(0)

An organization has operations in a location that regularly experiences severe weather events. Which of the following would BEST help to mitigate the risk to operations?

Question 1054

(0)

Which of the following is the MAIN benefit to an organization using key risk indicators (KRIs)?

Question 1055

(0)

What is the BEST recommendation to reduce the risk associated with potential system compromise when a vendor stops releasing security patches and updates for a business-critical legacy system?

Question 1056

(0)

Which of the following would provide the MOST helpful input to develop risk scenarios associated with hosting an organization's key IT applications in a cloud environment?

Question 1057

(0)

A newly incorporated enterprise needs to secure its information assets From a governance perspective which of the following should be done FIRST?

Question 1058

(0)

A highly regulated enterprise is developing a new risk management plan to specifically address legal and regulatory risk scenarios What should be done FIRST by IT governance to support this effort?

Question 1059

(0)

Business management is seeking assurance from the CIO that IT has a plan in place for early identification of potential issues that could impact the delivery of a new application Which of the follow

Question 1060

(0)

A root because analysis indicates a major service disruption due to a lack of competency of newly hired IT system administrators Who should be accountable for resolving the situation?

Question 1051

Which of the following should be the FIRST consideration when establishing a new risk governance program?

Developing an ongoing awareness and training program

Creating policies and standards that are easy to comprehend

Embedding risk management into the organization

Completing annual risk assessments on critical resources

Show Answer Comment (0)

Question 1052

When establishing an enterprise IT risk management program, it is MOST important to:

review alignment with the organizations strategy.

understand the organization's information security policy.

validate the organization's data classification scheme.

report identified IT risk scenarios to senior management.

Show Answer Comment (0)

Question 1053

An organization has operations in a location that regularly experiences severe weather events. Which of the following would BEST help to mitigate the risk to operations?

Prepare a cost-benefit analysis to evaluate relocation.

Prepare a disaster recovery plan (DRP).

Conduct a business impact analysis (BIA) for an alternate location.

Develop a business continuity plan (BCP).

Show Answer Comment (0)

Question 1054

Which of the following is the MAIN benefit to an organization using key risk indicators (KRIs)?

KRIs provide an early warning that a risk threshold is about to be reached.

KRIs signal that a change in the control environment has occurred.

KRIs provide a basis to set the risk appetite for an organization.

KRIs assist in the preparation of the organization's risk profile.

Show Answer Comment (0)

Question 1055

What is the BEST recommendation to reduce the risk associated with potential system compromise when a vendor stops releasing security patches and updates for a business-critical legacy system?

Segment the system on its own network.

Ensure regular backups take place.

Virtualize the system in the cloud.

Install antivirus software on the system.

Show Answer Comment (0)

Question 1056

Which of the following would provide the MOST helpful input to develop risk scenarios associated with hosting an organization's key IT applications in a cloud environment?

Reviewing the results of independent audits

Performing a site visit to the cloud provider's data center

Performing a due diligence review

Conducting a risk workshop with key stakeholders

Show Answer Comment (0)

Question 1057

A newly incorporated enterprise needs to secure its information assets From a governance perspective which of the following should be done FIRST?

Define information retention requirements and policies

Provide information security awareness training

Establish security management processes and procedures

Establish an inventory of information assets

Show Answer Comment (0)

Question 1058

A highly regulated enterprise is developing a new risk management plan to specifically address legal and regulatory risk scenarios What should be done FIRST by IT governance to support this effort?

Request a regulatory risk reporting methodology

Require critical success factors (CSFs) for IT risks.

Establish IT-specific compliance objectives

Communicate IT key risk indicators (KRIs) and triggers

Show Answer Comment (0)

Business management is seeking assurance from the CIO that IT has a plan in place for early identification of potential issues that could impact the delivery of a new application Which of the following is the BEST way to increase the chances of a successful delivery'?

Implement a release and deployment plan

Conduct comprehensive regression testing.

Develop enterprise-wide key risk indicators (KRls)

Include business management on a weekly risk and issues report

Show Answer Comment (0)

Question 1060

A root because analysis indicates a major service disruption due to a lack of competency of newly hired IT system administrators Who should be accountable for resolving the situation?

HR training director

Business process owner

HR recruitment manager

Chief information officer (CIO)

Show Answer Comment (0)

Total 1.200 questions