Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 20

Question list

List of questions

Question 191

(0)

Which of the following should be a risk practitioner's MOST important consideration when developing IT risk scenarios?

Question 192

(0)

A bank has outsourced its statement printing function to an external service provider. Which of the following is the MOST critical requirement to include in the contract?

Question 193

(0)

The PRIMARY objective of The board of directors periodically reviewing the risk profile is to help ensure:

Question 194

(0)

A risk practitioner notices that a particular key risk indicator (KRI) has remained below its established trigger point for an extended period of time. Which of the following should be done FIRST?

Question 195

(0)

Which of the following is the MOST important consideration when performing a risk assessment of a fire suppression system within a data center?

Question 196

(0)

Deviation from a mitigation action plan's completion date should be determined by which of the following?

Question 197

(0)

Which of the following is the PRIMARY reason for an organization to ensure the risk register is updated regularly?

Question 198

(0)

Which of The following would offer the MOST insight with regard to an organization's risk culture?

Question 199

(0)

Which of the following could BEST detect an in-house developer inserting malicious functions into a web-based application?

Question 200

(0)

Which of the following is the MOST effective way to help ensure an organization's current risk scenarios are relevant?

Question 191

Which of the following should be a risk practitioner's MOST important consideration when developing IT risk scenarios?

The impact of controls on the efficiency of the business in delivering services

Linkage of identified risk scenarios with enterprise risk management

Potential threats and vulnerabilities that may have an impact on the business

Results of network vulnerability scanning and penetration testing

Show Answer Comment (0)

Question 192

A bank has outsourced its statement printing function to an external service provider. Which of the following is the MOST critical requirement to include in the contract?

Monitoring of service costs

Provision of internal audit reports

Notification of sub-contracting arrangements

Confidentiality of customer data

Show Answer Comment (0)

Question 193

The PRIMARY objective of The board of directors periodically reviewing the risk profile is to help ensure:

the risk strategy is appropriate

KRIs and KPIs are aligned

performance of controls is adequate

the risk monitoring process has been established

Show Answer Comment (0)

Question 194

A risk practitioner notices that a particular key risk indicator (KRI) has remained below its established trigger point for an extended period of time. Which of the following should be done FIRST?

Recommend a re-evaluation of the current threshold of the KRI.

Notify management that KRIs are being effectively managed.

Update the risk rating associated with the KRI In the risk register.

Update the risk tolerance and risk appetite to better align to the KRI.

Show Answer Comment (0)