Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 12

Question list

List of questions

Question 111

(0)

When determining which control deficiencies are most significant, which of the following would provide the MOST useful information?

Question 112

(0)

Which of the following is the MOST important consideration when multiple risk practitioners capture risk scenarios in a single risk register?

Question 113

(0)

Which of the following tools is MOST effective in identifying trends in the IT risk profile?

Question 114

(0)

Reviewing results from which of the following is the BEST way to identify information systems control deficiencies?

Question 115

(0)

Which of the following would be MOST important for a risk practitioner to provide to the internal audit department during the audit planning process?

Question 116

(0)

The number of tickets to rework application code has significantly exceeded the established threshold. Which of the following would be the risk practitioner s BEST recommendation?

Question 117

(0)

It is MOST appropriate for changes to be promoted to production after they are:

Question 118

(0)

Numerous media reports indicate a recently discovered technical vulnerability is being actively exploited. Which of the following would be the BEST response to this scenario?

Question 119

(0)

Which of the following helps ensure compliance with a nonrepudiation policy requirement for electronic transactions?

Question 120

(0)

Which of the following is the BEST approach to use when creating a comprehensive set of IT risk scenarios?

Question 111

When determining which control deficiencies are most significant, which of the following would provide the MOST useful information?

Risk analysis results

Exception handling policy

Vulnerability assessment results

Benchmarking assessments

Show Answer Comment (0)

Question 112

Which of the following is the MOST important consideration when multiple risk practitioners capture risk scenarios in a single risk register?

Aligning risk ownership and control ownership

Developing risk escalation and reporting procedures

Maintaining up-to-date risk treatment plans

Using a consistent method for risk assessment

Show Answer Comment (0)

Question 113

Which of the following tools is MOST effective in identifying trends in the IT risk profile?

Risk self-assessment

Risk register

Risk dashboard

Risk map

Show Answer Comment (0)

Question 114

Reviewing results from which of the following is the BEST way to identify information systems control deficiencies?

Vulnerability and threat analysis

Control remediation planning

User acceptance testing (UAT)

Control self-assessment (CSA)

Show Answer Comment (0)

Question 115

Which of the following would be MOST important for a risk practitioner to provide to the internal audit department during the audit planning process?

Closed management action plans from the previous audit

Annual risk assessment results

An updated vulnerability management report

A list of identified generic risk scenarios

Show Answer Comment (0)

Question 116

The number of tickets to rework application code has significantly exceeded the established threshold. Which of the following would be the risk practitioner s BEST recommendation?

Perform a root cause analysis

Perform a code review

Implement version control software.

Implement training on coding best practices

Show Answer Comment (0)

Question 117

It is MOST appropriate for changes to be promoted to production after they are:

communicated to business management

tested by business owners.

approved by the business owner.

initiated by business users.

Show Answer Comment (0)

Question 118

Numerous media reports indicate a recently discovered technical vulnerability is being actively exploited. Which of the following would be the BEST response to this scenario?

Assess the vulnerability management process.

Conduct a control serf-assessment.

Conduct a vulnerability assessment.

Reassess the inherent risk of the target.

Show Answer Comment (0)