Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 18

Question list

List of questions

Question 171

(0)

Which of the following is the BEST approach for determining whether a risk action plan is effective?

Question 172

(0)

Which of the following is the MOST effective way to integrate business risk management with IT operations?

Question 173

(0)

Which of the following should be the PRIMARY objective of a risk awareness training program?

Question 174

(0)

Which of the following BEST confirms the existence and operating effectiveness of information systems controls?

Question 175

(0)

Which of the following BEST confirms the existence and operating effectiveness of information systems controls?

Question 176

(0)

Who should be responsible for implementing and maintaining security controls?

Question 177

(0)

Which of the following is MOST important for a risk practitioner to update when a software upgrade renders an existing key control ineffective?

Question 178

(0)

When establishing leading indicators for the information security incident response process it is MOST important to consider the percentage of reported incidents:

Question 179

(0)

An organization is measuring the effectiveness of its change management program to reduce the number of unplanned production changes. Which of the following would be the BEST metric to determine if

Question 180

(0)

Which of The following is the MOST relevant information to include in a risk management strategy?

Question 171

Which of the following is the BEST approach for determining whether a risk action plan is effective?

Comparing the remediation cost against budget

Assessing changes in residual risk

Assessing the inherent risk

Monitoring changes of key performance indicators (KPIs)

Show Answer Comment (0)

Question 172

Which of the following is the MOST effective way to integrate business risk management with IT operations?

Perform periodic IT control self-assessments.

Require a risk assessment with change requests.

Provide security awareness training.

Perform periodic risk assessments.

Show Answer Comment (0)

Question 173

Which of the following should be the PRIMARY objective of a risk awareness training program?

To enable risk-based decision making

To promote awareness of the risk governance function

To clarify fundamental risk management principles

To ensure sufficient resources are available

Show Answer Comment (0)

Question 174

Which of the following BEST confirms the existence and operating effectiveness of information systems controls?

Self-assessment questionnaires completed by management

Review of internal audit and third-party reports

Management review and sign-off on system documentation

First-hand direct observation of the controls in operation

Show Answer Comment (0)

Question 175

Which of the following BEST confirms the existence and operating effectiveness of information systems controls?

Self-assessment questionnaires completed by management

Review of internal audit and third-party reports

Management review and sign-off on system documentation

First-hand direct observation of the controls in operation

Show Answer Comment (0)

Question 176

Who should be responsible for implementing and maintaining security controls?

End user

Internal auditor

Data owner

Data custodian

Show Answer Comment (0)

Question 177

Which of the following is MOST important for a risk practitioner to update when a software upgrade renders an existing key control ineffective?

Audit engagement letter

Risk profile

IT risk register

Change control documentation

Show Answer Comment (0)

Question 178

When establishing leading indicators for the information security incident response process it is MOST important to consider the percentage of reported incidents:

that result in a full root cause analysis.

used for verification within the SLA.

that are verified as actual incidents.

resolved within the SLA.

Show Answer Comment (0)

An organization is measuring the effectiveness of its change management program to reduce the number of unplanned production changes. Which of the following would be the BEST metric to determine if the program is performing as expected?

Decrease in the time to move changes to production

Ratio of emergency fixes to total changes

Ratio of system changes to total changes

Decrease in number of changes without a fallback plan

Show Answer Comment (0)