Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 17

Question list

List of questions

Question 161

(0)

The PRIMARY reason a risk practitioner would be interested in an internal audit report is to:

Question 162

(0)

A risk practitioner discovers several key documents detailing the design of a product currently in development have been posted on the Internet. What should be the risk practitioner's FIRST course o

Question 163

(0)

Which of the following is the MOST effective key performance indicator (KPI) for change management?

Question 164

(0)

An effective control environment is BEST indicated by controls that:

Question 165

(0)

Which of the following is the BEST way to validate the results of a vulnerability assessment?

Question 166

(0)

Which of the following BEST provides an early warning that network access of terminated employees is not being revoked in accordance with the service level agreement (SLA)?

Question 167

(0)

A risk assessment has identified that an organization may not be in compliance with industry regulations. The BEST course of action would be to:

Question 168

(0)

Which of the following criteria is MOST important when developing a response to an attack that would compromise data?

Question 169

(0)

Which of the following will BEST help an organization select a recovery strategy for critical systems?

Question 170

(0)

A monthly payment report is generated from the enterprise resource planning (ERP) software to validate data against the old and new payroll systems. What is the BEST way to mitigate the risk associa

Question 161

The PRIMARY reason a risk practitioner would be interested in an internal audit report is to:

plan awareness programs for business managers.

evaluate maturity of the risk management process.

assist in the development of a risk profile.

maintain a risk register based on noncompliances.

Show Answer Comment (0)

A risk practitioner discovers several key documents detailing the design of a product currently in development have been posted on the Internet. What should be the risk practitioner's FIRST course of action?

invoke the established incident response plan.

Inform internal audit.

Perform a root cause analysis

Conduct an immediate risk assessment

Show Answer Comment (0)

Question 163

Which of the following is the MOST effective key performance indicator (KPI) for change management?

Percentage of changes with a fallback plan

Number of changes implemented

Percentage of successful changes

Average time required to implement a change

Show Answer Comment (0)

Question 164

An effective control environment is BEST indicated by controls that:

minimize senior management's risk tolerance.

manage risk within the organization's risk appetite.

reduce the thresholds of key risk indicators (KRIs).

are cost-effective to implement

Show Answer Comment (0)

Question 165

Which of the following is the BEST way to validate the results of a vulnerability assessment?

Perform a penetration test.

Review security logs.

Conduct a threat analysis.

Perform a root cause analysis.

Show Answer Comment (0)

Question 166

Which of the following BEST provides an early warning that network access of terminated employees is not being revoked in accordance with the service level agreement (SLA)?

Updating multi-factor authentication

Monitoring key access control performance indicators

Analyzing access control logs for suspicious activity

Revising the service level agreement (SLA)

Show Answer Comment (0)

Question 167

A risk assessment has identified that an organization may not be in compliance with industry regulations. The BEST course of action would be to:

conduct a gap analysis against compliance criteria.

identify necessary controls to ensure compliance.

modify internal assurance activities to include control validation.

collaborate with management to meet compliance requirements.

Show Answer Comment (0)

Question 168

Which of the following criteria is MOST important when developing a response to an attack that would compromise data?

The recovery time objective (RTO)

The likelihood of a recurring attack

The organization's risk tolerance

The business significance of the information

Show Answer Comment (0)

Question 169

Which of the following will BEST help an organization select a recovery strategy for critical systems?

Review the business impact analysis.

Create a business continuity plan.

Analyze previous disaster recovery reports.

Conduct a root cause analysis.

Show Answer Comment (0)

Question 170

A monthly payment report is generated from the enterprise resource planning (ERP) software to validate data against the old and new payroll systems. What is the BEST way to mitigate the risk associated with data integrity loss in the new payroll system after data migration?

Compare new system reports with functional requirements.

Compare encrypted data with checksums.

Compare results of user acceptance testing (UAT) with the testing criteria.

Compare processing output from both systems using the previous month's data.

Show Answer Comment (0)

Total 1.200 questions