Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 118

Question list

List of questions

Question 1171

(0)

Which of the following should be the PRIMARY focus of a risk owner once a decision is made to mitigate a risk?

Question 1172

(0)

An organization plans to implement a new Software as a Service (SaaS) speech-to-text solution Which of the following is MOST important to mitigate risk associated with data privacy?

Question 1173

(0)

An incentive program is MOST likely implemented to manage the risk associated with loss of which organizational asset?

Question 1174

(0)

When creating a separate IT risk register for a large organization, which of the following is MOST important to consider with regard to the existing corporate risk 'register?

Question 1175

(0)

Which of the following is the PRIMARY accountability for a control owner?

Question 1176

(0)

A recent risk workshop has identified risk owners and responses for newly identified risk scenarios. Which of the following should be the risk practitioner s NEXT step? r

Question 1177

(0)

Which of the following should be a risk practitioner's NEXT step after learning of an incident that has affected a competitor?

Question 1178

(0)

WhichT5f the following is the MOST effective way to promote organization-wide awareness of data security in response to an increase in regulatory penalties for data leakage?

Question 1179

(0)

Which of the following BEST enables senior management lo compare the ratings of risk scenarios?

Question 1180

(0)

Which of the following is the PRIMARY reason for an organization to include an acceptable use banner when users log in?

Question 1171

Which of the following should be the PRIMARY focus of a risk owner once a decision is made to mitigate a risk?

Updating the risk register to include the risk mitigation plan

Determining processes for monitoring the effectiveness of the controls

Ensuring that control design reduces risk to an acceptable level

Confirming to management the controls reduce the likelihood of the risk

Show Answer Comment (0)

Question 1172

An organization plans to implement a new Software as a Service (SaaS) speech-to-text solution Which of the following is MOST important to mitigate risk associated with data privacy?

Secure encryption protocols are utilized.

Multi-factor authentication is set up for users.

The solution architecture is approved by IT.

A risk transfer clause is included in the contact

Show Answer Comment (0)

Question 1173

An incentive program is MOST likely implemented to manage the risk associated with loss of which organizational asset?

Employees

Data

Reputation

Customer lists

Show Answer Comment (0)

Question 1174

When creating a separate IT risk register for a large organization, which of the following is MOST important to consider with regard to the existing corporate risk 'register?

Leveraging business risk professionals

Relying on generic IT risk scenarios

Describing IT risk in business terms

Using a common risk taxonomy

Show Answer Comment (0)

Question 1175

Which of the following is the PRIMARY accountability for a control owner?

Communicate risk to senior management.

Own the associated risk the control is mitigating.

Ensure the control operates effectively.

Identify and assess control weaknesses.

Show Answer Comment (0)

Question 1176

A recent risk workshop has identified risk owners and responses for newly identified risk scenarios. Which of the following should be the risk practitioner s NEXT step? r

Prepare a business case for the response options.

Identify resources for implementing responses.

Develop a mechanism for monitoring residual risk.

Update the risk register with the results.

Show Answer Comment (0)

Question 1177

Which of the following should be a risk practitioner's NEXT step after learning of an incident that has affected a competitor?

Activate the incident response plan.

Implement compensating controls.

Update the risk register.

Develop risk scenarios.

Show Answer Comment (0)

Question 1178

WhichT5f the following is the MOST effective way to promote organization-wide awareness of data security in response to an increase in regulatory penalties for data leakage?

Enforce sanctions for noncompliance with security procedures.

Conduct organization-w>de phishing simulations.

Require training on the data handling policy.

Require regular testing of the data breach response plan.

Show Answer Comment (0)