Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 111

Question list

List of questions

Question 1101

(0)

Who is the BEST person to the employee personal data?

Question 1102

(0)

Which of the following is MOST important to consider before determining a response to a vulnerability?

Question 1103

(0)

Which of the following is the GREATEST benefit of centralizing IT systems?

Question 1104

(0)

Which of the following is the PRIMARY objective of maintaining an information asset inventory?

Question 1105

(0)

Which of the following provides the MOST useful information for developing key risk indicators (KRIs)?

Question 1106

(0)

Which of the following should be used as the PRIMARY basis for evaluating the state of an organization's cloud computing environment against leading practices?

Question 1107

(0)

An organization is implementing robotic process automation (RPA) to streamline business processes. Given that implementation of this technology is expected to impact existing controls, which of the

Question 1108

(0)

Which of the following is the MOST important consideration for effectively maintaining a risk register?

Question 1109

(0)

Which of the following activities BEST facilitates effective risk management throughout the organization?

Question 1110

(0)

Which of the following is the MOST important benefit of reporting risk assessment results to senior management?

Question 1101

Who is the BEST person to the employee personal data?

Human resources (HR) manager

System administrator

Data privacy manager

Compliance manager

Show Answer Comment (0)

Question 1102

Which of the following is MOST important to consider before determining a response to a vulnerability?

The likelihood and impact of threat events

The cost to implement the risk response

Lack of data to measure threat events

Monetary value of the asset

Show Answer Comment (0)

Question 1103

Which of the following is the GREATEST benefit of centralizing IT systems?

Risk reporting

Risk classification

Risk monitoring

Risk identification

Show Answer Comment (0)

Question 1104

Which of the following is the PRIMARY objective of maintaining an information asset inventory?

To provide input to business impact analyses (BIAs)

To protect information assets

To facilitate risk assessments

To manage information asset licensing

Show Answer Comment (0)

Question 1105

Which of the following provides the MOST useful information for developing key risk indicators (KRIs)?

Business impact analysis (BIA) results

Risk scenario ownership

Risk thresholds

Possible causes of materialized risk

Show Answer Comment (0)

Question 1106

Which of the following should be used as the PRIMARY basis for evaluating the state of an organization's cloud computing environment against leading practices?

The cloud environment's capability maturity model

The cloud environment's risk register

The cloud computing architecture

The organization's strategic plans for cloud computing

Show Answer Comment (0)

An organization is implementing robotic process automation (RPA) to streamline business processes. Given that implementation of this technology is expected to impact existing controls, which of the following is the risk practitioner's BEST course of action?

Reassess whether mitigating controls address the known risk in the processes.

Update processes to address the new technology.

Update the data governance policy to address the new technology.

Perform a gap analysis of the impacted processes.

Show Answer Comment (0)