Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 28

Question list

List of questions

Question 271

(0)

During a control review, the control owner states that an existing control has deteriorated over time. What is the BEST recommendation to the control owner?

Question 272

(0)

The MOST effective approach to prioritize risk scenarios is by:

Question 273

(0)

The BEST way to test the operational effectiveness of a data backup procedure is to:

Question 274

(0)

Which of The following is the PRIMARY consideration when establishing an organization's risk management methodology?

Question 275

(0)

Which of the following would prompt changes in key risk indicator {KRI) thresholds?

Question 276

(0)

Which of the following can be interpreted from a single data point on a risk heat map?

Question 277

(0)

An organization has raised the risk appetite for technology risk. The MOST likely result would be:

Question 278

(0)

Following a significant change to a business process, a risk practitioner believes the associated risk has been reduced. The risk practitioner should advise the risk owner to FIRST

Question 279

(0)

Which of the following BEST measures the efficiency of an incident response process?

Question 280

(0)

A risk owner should be the person accountable for:

Question 271

During a control review, the control owner states that an existing control has deteriorated over time. What is the BEST recommendation to the control owner?

Implement compensating controls to reduce residual risk

Escalate the issue to senior management

Discuss risk mitigation options with the risk owner.

Certify the control after documenting the concern.

Show Answer Comment (0)

Question 272

The MOST effective approach to prioritize risk scenarios is by:

assessing impact to the strategic plan.

aligning with industry best practices.

soliciting input from risk management experts.

evaluating the cost of risk response.

Show Answer Comment (0)

Question 273

The BEST way to test the operational effectiveness of a data backup procedure is to:

conduct an audit of files stored offsite.

interview employees to compare actual with expected procedures.

inspect a selection of audit trails and backup logs.

demonstrate a successful recovery from backup files.

Show Answer Comment (0)

Question 274

Which of The following is the PRIMARY consideration when establishing an organization's risk management methodology?

Business context

Risk tolerance level

Resource requirements

Benchmarking information

Show Answer Comment (0)

Question 275

Which of the following would prompt changes in key risk indicator {KRI) thresholds?

Changes to the risk register

Changes in risk appetite or tolerance

Modification to risk categories

Knowledge of new and emerging threats

Show Answer Comment (0)

Question 276

Which of the following can be interpreted from a single data point on a risk heat map?

Risk tolerance

Risk magnitude

Risk response

Risk appetite

Show Answer Comment (0)

Question 277

An organization has raised the risk appetite for technology risk. The MOST likely result would be:

increased inherent risk.

higher risk management cost

decreased residual risk.

lower risk management cost.

Show Answer Comment (0)

Question 278

Following a significant change to a business process, a risk practitioner believes the associated risk has been reduced. The risk practitioner should advise the risk owner to FIRST

review the key risk indicators.

conduct a risk analysis.

update the risk register

reallocate risk response resources.

Show Answer Comment (0)