Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 32

Question list

List of questions

Question 311

(0)

An organization has engaged a third party to provide an Internet gateway encryption service that protects sensitive data uploaded to a cloud service. This is an example of risk:

Question 312

(0)

An IT license audit has revealed that there are several unlicensed copies of co be to:

Question 313

(0)

Which of the following conditions presents the GREATEST risk to an application?

Question 314

(0)

The annualized loss expectancy (ALE) method of risk analysis:

Question 315

(0)

During an IT department reorganization, the manager of a risk mitigation action plan was replaced. The new manager has begun implementing a new control after identifying a more effective option. Whi

Question 316

(0)

The GREATEST concern when maintaining a risk register is that:

Question 317

(0)

Which of the following is the BEST way to support communication of emerging risk?

Question 318

(0)

Which of the following is the BEST indication that an organization's risk management program has not reached the desired maturity level?

Question 319

(0)

An IT organization is replacing the customer relationship management (CRM) system. Who should own the risk associated with customer data leakage caused by insufficient IT security controls for the n

Question 320

(0)

Which of the following provides the MOST important information to facilitate a risk response decision?

Question 311

An organization has engaged a third party to provide an Internet gateway encryption service that protects sensitive data uploaded to a cloud service. This is an example of risk:

mitigation.

avoidance.

transfer.

acceptance.

Show Answer Comment (0)

Question 312

An IT license audit has revealed that there are several unlicensed copies of co be to:

immediately uninstall the unlicensed software from the laptops

centralize administration rights on laptops so that installations are controlled

report the issue to management so appropriate action can be taken.

procure the requisite licenses for the software to minimize business impact.

Show Answer Comment (0)

Question 313

Which of the following conditions presents the GREATEST risk to an application?

Application controls are manual.

Application development is outsourced.

Source code is escrowed.

Developers have access to production environment.

Show Answer Comment (0)

Question 314

The annualized loss expectancy (ALE) method of risk analysis:

helps in calculating the expected cost of controls

uses qualitative risk rankings such as low. medium and high.

can be used m a cost-benefit analysts

can be used to determine the indirect business impact.

Show Answer Comment (0)

During an IT department reorganization, the manager of a risk mitigation action plan was replaced. The new manager has begun implementing a new control after identifying a more effective option. Which of the following is the risk practitioner's BEST course of action?

Communicate the decision to the risk owner for approval

Seek approval from the previous action plan manager.

Identify an owner for the new control.

Modify the action plan in the risk register.

Show Answer Comment (0)

Question 316

The GREATEST concern when maintaining a risk register is that:

impacts are recorded in qualitative terms.

executive management does not perform periodic reviews.

IT risk is not linked with IT assets.

significant changes in risk factors are excluded.

Show Answer Comment (0)

Question 317

Which of the following is the BEST way to support communication of emerging risk?

Update residual risk levels to reflect the expected risk impact.

Adjust inherent risk levels upward.

Include it on the next enterprise risk committee agenda.

Include it in the risk register for ongoing monitoring.

Show Answer Comment (0)

Question 318

Which of the following is the BEST indication that an organization's risk management program has not reached the desired maturity level?

Significant increases in risk mitigation budgets

Large fluctuations in risk ratings between assessments

A steady increase in the time to recover from incidents

A large number of control exceptions

Show Answer Comment (0)

Question 319

An IT organization is replacing the customer relationship management (CRM) system. Who should own the risk associated with customer data leakage caused by insufficient IT security controls for the new system?

Chief information security officer

Business process owner

Chief risk officer

IT controls manager

Show Answer Comment (0)