Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 2

Question list

List of questions

Question 11

(0)

An application owner has specified the acceptable downtime in the event of an incident to be much lower than the actual time required for the response team to recover the application. Which of the f

Question 12

(0)

Which of the following is the MAIN reason to continuously monitor IT-related risk?

Question 13

(1)

An organization that has been the subject of multiple social engineering attacks is developing a risk awareness program. The PRIMARY goal of this program should be to:

Question 14

(0)

Which of the following is the MOST important factor affecting risk management in an organization?

Question 15

(0)

Which of the following is the MOST important consideration when sharing risk management updates with executive management?

Question 16

(0)

A risk practitioner has observed that there is an increasing trend of users sending sensitive information by email without using encryption. Which of the following would be the MOST effective approa

Question 17

(0)

Risk management strategies are PRIMARILY adopted to:

Question 18

(0)

Which of the following would be MOST helpful when estimating the likelihood of negative events?

Question 19

(0)

Which of the following would be considered a vulnerability?

Question 20

(0)

Establishing and organizational code of conduct is an example of which type of control?

Question 11

An application owner has specified the acceptable downtime in the event of an incident to be much lower than the actual time required for the response team to recover the application. Which of the following should be the NEXT course of action?

Invoke the disaster recovery plan during an incident.

Prepare a cost-benefit analysis of alternatives available

Implement redundant infrastructure for the application.

Reduce the recovery time by strengthening the response team.

Show Answer Comment (0)

Question 12

Which of the following is the MAIN reason to continuously monitor IT-related risk?

To redefine the risk appetite and risk tolerance levels based on changes in risk factors

To update the risk register to reflect changes in levels of identified and new IT-related risk

To ensure risk levels are within acceptable limits of the organization's risk appetite and risk tolerance

To help identify root causes of incidents and recommend suitable long-term solutions

Show Answer Comment (0)

Question 13

An organization that has been the subject of multiple social engineering attacks is developing a risk awareness program. The PRIMARY goal of this program should be to:

reduce the risk to an acceptable level.

communicate the consequences for violations.

implement industry best practices.

reduce the organization's risk appetite

Show Answer Comment (1)

Question 14

Which of the following is the MOST important factor affecting risk management in an organization?

The risk manager's expertise

Regulatory requirements

Board of directors' expertise

The organization's culture

Show Answer Comment (0)

Question 15

Which of the following is the MOST important consideration when sharing risk management updates with executive management?

Using an aggregated view of organizational risk

Ensuring relevance to organizational goals

Relying on key risk indicator (KRI) data Including

Trend analysis of risk metrics

Show Answer Comment (0)

Question 16

A risk practitioner has observed that there is an increasing trend of users sending sensitive information by email without using encryption. Which of the following would be the MOST effective approach to mitigate the risk associated with data loss?

Implement a tool to create and distribute violation reports

Raise awareness of encryption requirements for sensitive data.

Block unencrypted outgoing emails which contain sensitive data.

Implement a progressive disciplinary process for email violations.

Show Answer Comment (0)