Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 29

Question list

List of questions

Question 281

(0)

Quantifying the value of a single asset helps the organization to understand the:

Question 282

(0)

A PRIMARY function of the risk register is to provide supporting information for the development of an organization's risk:

Question 283

(0)

A risk practitioner recently discovered that sensitive data from the production environment is required for testing purposes in non-production environments. Which of the following i the BEST recomme

Question 284

(0)

IT stakeholders have asked a risk practitioner for IT risk profile reports associated with specific departments to allocate resources for risk mitigation. The BEST way to address this request would

Question 285

(0)

Which of the following is the MAIN benefit of involving stakeholders in the selection of key risk indicators (KRIs)?

Question 286

(0)

Which of the following BEST indicates effective information security incident management?

Question 287

(0)

Which of the following is a detective control?

Question 288

(0)

Whose risk tolerance matters MOST when making a risk decision?

Question 289

(0)

An identified high probability risk scenario involving a critical, proprietary business function has an annualized cost of control higher than the annual loss expectancy. Which of the following is t

Question 290

(0)

After identifying new risk events during a project, the project manager s NEXT step should be to:

Question 281

Quantifying the value of a single asset helps the organization to understand the:

overall effectiveness of risk management

consequences of risk materializing

necessity of developing a risk strategy,

organization s risk threshold.

Show Answer Comment (0)

Question 282

A PRIMARY function of the risk register is to provide supporting information for the development of an organization's risk:

strategy.

profile.

process.

map.

Show Answer Comment (0)

A risk practitioner recently discovered that sensitive data from the production environment is required for testing purposes in non-production environments. Which of the following i the BEST recommendation to address this situation?

Enable data encryption in the test environment

Implement equivalent security in the test environment.

Prevent the use of production data for test purposes

Mask data before being transferred to the test environment.

Show Answer Comment (0)

Question 284

IT stakeholders have asked a risk practitioner for IT risk profile reports associated with specific departments to allocate resources for risk mitigation. The BEST way to address this request would be to use:

the cost associated with each control.

historical risk assessments.

key risk indicators (KRls).

information from the risk register.

Show Answer Comment (0)

Question 285

Which of the following is the MAIN benefit of involving stakeholders in the selection of key risk indicators (KRIs)?

Improving risk awareness

Obtaining buy-in from risk owners

Leveraging existing metrics

Optimizing risk treatment decisions

Show Answer Comment (0)

Question 286

Which of the following BEST indicates effective information security incident management?

Monthly trend of information security-related incidents

Average time to identify critical information security incidents

Frequency of information security incident response plan testing

Percentage of high risk security incidents

Show Answer Comment (0)

Question 287

Which of the following is a detective control?

Limit check

Periodic access review

Access control software

Rerun procedures

Show Answer Comment (0)

Question 288

Whose risk tolerance matters MOST when making a risk decision?

Customers who would be affected by a breach

Auditors, regulators and standards organizations

The business process owner of the exposed assets

The information security manager

Show Answer Comment (0)

Question 289

An identified high probability risk scenario involving a critical, proprietary business function has an annualized cost of control higher than the annual loss expectancy. Which of the following is the BEST risk response?

Mitigate