Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 34

Question list

List of questions

Question 331

(0)

Which of the following will BEST help an organization evaluate the control environment of several third-party vendors?

Question 332

(0)

When prioritizing risk response, management should FIRST:

Question 333

(0)

An audit reveals that there are changes in the environment that are not reflected in the risk profile. Which of the following is the BEST course of action?

Question 334

(0)

Which of the following is the MAIN reason for analyzing risk scenarios?

Question 335

(0)

Which of the following is MOST commonly compared against the risk appetite?

Question 336

(0)

An organization has granted a vendor access to its data in order to analyze customer behavior. Which of the following would be the MOST effective control to mitigate the risk of customer data leakag

Question 337

(0)

The MAIN purpose of having a documented risk profile is to:

Question 338

(0)

Which of the following is the GREATEST concern when using a generic set of IT risk scenarios for risk analysis?

Question 339

(0)

Which of the following activities should be performed FIRST when establishing IT risk management processes?

Question 340

(0)

An organization has introduced risk ownership to establish clear accountability for each process. To ensure effective risk ownership, it is MOST important that:

Question 331

Which of the following will BEST help an organization evaluate the control environment of several third-party vendors?

Review vendors' internal risk assessments covering key risk and controls.

Obtain independent control reports from high-risk vendors.

Review vendors performance metrics on quality and delivery of processes.

Obtain vendor references from third parties.

Show Answer Comment (0)

Question 332

When prioritizing risk response, management should FIRST:

evaluate the organization s ability and expertise to implement the solution.

evaluate the risk response of similar organizations.

address high risk factors that have efficient and effective solutions.

determine which risk factors have high remediation costs

Show Answer Comment (0)

Question 333

An audit reveals that there are changes in the environment that are not reflected in the risk profile. Which of the following is the BEST course of action?

Review the risk identification process.

Inform the risk scenario owners.

Create a risk awareness communication plan.

Update the risk register.

Show Answer Comment (0)

Question 334

Which of the following is the MAIN reason for analyzing risk scenarios?

Identifying additional risk scenarios

Updating the heat map

Assessing loss expectancy

Establishing a risk appetite

Show Answer Comment (0)

Question 335

Which of the following is MOST commonly compared against the risk appetite?

IT risk

Inherent risk

Financial risk

Residual risk

Show Answer Comment (0)

An organization has granted a vendor access to its data in order to analyze customer behavior. Which of the following would be the MOST effective control to mitigate the risk of customer data leakage?

Enforce criminal background checks.

Mask customer data fields.

Require vendor to sign a confidentiality agreement.

Restrict access to customer data on a 'need to know'' basis.

Show Answer Comment (0)

Question 337

The MAIN purpose of having a documented risk profile is to:

comply with external and internal requirements.

enable well-informed decision making.

prioritize investment projects.

keep the risk register up-to-date.

Show Answer Comment (0)

Question 338

Which of the following is the GREATEST concern when using a generic set of IT risk scenarios for risk analysis?

Quantitative analysis might not be possible.

Risk factors might not be relevant to the organization

Implementation costs might increase.

Inherent risk might not be considered.

Show Answer Comment (0)

Question 339

Which of the following activities should be performed FIRST when establishing IT risk management processes?

Collect data of past incidents and lessons learned.

Conduct a high-level risk assessment based on the nature of business.

Identify the risk appetite of the organization.

Assess the goals and culture of the organization.

Show Answer Comment (0)

Question 340

An organization has introduced risk ownership to establish clear accountability for each process. To ensure effective risk ownership, it is MOST important that:

senior management has oversight of the process.

process ownership aligns with IT system ownership.

segregation of duties exists between risk and process owners.

risk owners have decision-making authority.

Show Answer Comment (0)

Total 1.200 questions