Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 110

Question list

List of questions

Question 1091

(0)

Which of the following should be the GREATEST concern to a risk practitioner when process documentation is incomplete?

Question 1092

(0)

Which of the following is the MOST effective way to help ensure accountability for managing risk?

Question 1093

(0)

Which of the following would provide the MOST reliable evidence of the effectiveness of security controls implemented for a web application?

Question 1094

(0)

Which of the following would be of MOST concern to a risk practitioner reviewing risk action plans for documented IT risk scenarios?

Question 1095

(0)

Which of the following is MOST important for an organization to consider when developing its IT strategy?

Question 1096

(0)

Which of the following is the BEST way to ensure adequate resources will be allocated to manage identified risk?

Question 1097

(0)

Which of the following provides the MOST comprehensive information when developing a risk profile for a system?

Question 1098

(0)

Which of the following, who should be PRIMARILY responsible for performing user entitlement reviews?

Question 1099

(0)

An organization has decided to implement a new Internet of Things (loT) solution. Which of the following should be done FIRST when addressing security concerns associated with this new technology?

Question 1100

(0)

Which of the following is the BEST course of action when an organization wants to reduce likelihood in order to reduce a risk level?

Question 1091

Which of the following should be the GREATEST concern to a risk practitioner when process documentation is incomplete?

Inability to allocate resources efficiently

Inability to identify the risk owner

Inability to complete the risk register

Inability to identify process experts

Show Answer Comment (0)

Question 1092

Which of the following is the MOST effective way to help ensure accountability for managing risk?

Assign process owners to key risk areas.

Obtain independent risk assessments.

Assign incident response action plan responsibilities.

Create accurate process narratives.

Show Answer Comment (0)

Question 1093

Which of the following would provide the MOST reliable evidence of the effectiveness of security controls implemented for a web application?

Penetration testing

IT general controls audit

Vulnerability assessment

Fault tree analysis

Show Answer Comment (0)

Question 1094

Which of the following would be of MOST concern to a risk practitioner reviewing risk action plans for documented IT risk scenarios?

Individuals outside IT are managing action plans for the risk scenarios.

Target dates for completion are missing from some action plans.

Senior management approved multiple changes to several action plans.

Many action plans were discontinued after senior management accepted the risk.

Show Answer Comment (0)

Question 1095

Which of the following is MOST important for an organization to consider when developing its IT strategy?

IT goals and objectives

Organizational goals and objectives

The organization's risk appetite statement

Legal and regulatory requirements

Show Answer Comment (0)

Question 1096

Which of the following is the BEST way to ensure adequate resources will be allocated to manage identified risk?

Prioritizing risk within each business unit

Reviewing risk ranking methodology

Promoting an organizational culture of risk awareness

Assigning risk ownership to appropriate roles

Show Answer Comment (0)

Question 1097

Which of the following provides the MOST comprehensive information when developing a risk profile for a system?

Results of a business impact analysis (BIA)

Risk assessment results

A mapping of resources to business processes

Key performance indicators (KPIs)

Show Answer Comment (0)

Question 1098

Which of the following, who should be PRIMARILY responsible for performing user entitlement reviews?

IT security manager

IT personnel

Data custodian

Data owner

Show Answer Comment (0)

Question 1099

An organization has decided to implement a new Internet of Things (loT) solution. Which of the following should be done FIRST when addressing security concerns associated with this new technology?

Develop new loT risk scenarios.

Implement loT device monitoring software.

Introduce controls to the new threat environment.

Engage external security reviews.

Show Answer Comment (0)

Question 1100

Which of the following is the BEST course of action when an organization wants to reduce likelihood in order to reduce a risk level?

Monitor risk controls.

Implement preventive measures.

Implement detective controls.

Transfer the risk.

Show Answer Comment (0)

Total 1.200 questions

108 109 110 111 112

Go to page: of 120

Isaca CRISC Practice Test - Questions Answers, Page 110

Question list

List of questions

Question 1091

(0)

Question 1092

(0)

Question 1093

(0)

Question 1094

(0)

Question 1095

(0)

Question 1096

(0)

Question 1097

(0)

Question 1098

(0)

Question 1099

(0)

Question 1100

(0)

Related questions

Question