Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 39

Question list

List of questions

Question 381

(0)

Which of the following is the PRIMARY responsibility of the first line of defense related to computer-enabled fraud?

Question 382

(0)

Mapping open risk issues to an enterprise risk heat map BEST facilitates:

Question 383

(0)

Which of the following BEST enables the risk profile to serve as an effective resource to support business objectives?

Question 384

(0)

Which of the following will BEST ensure that information security risk factors are mitigated when developing in-house applications?

Question 385

(0)

An organization has identified that terminated employee accounts are not disabled or deleted within the time required by corporate policy. Unsure of the reason, the organization has decided to monit

Question 386

(0)

Which of the following is MOST effective in continuous risk management process improvement?

Question 387

(0)

Which of the following would provide executive management with the BEST information to make risk decisions as a result of a risk assessment?

Question 388

(0)

Implementing which of the following controls would BEST reduce the impact of a vulnerability that has been exploited?

Question 389

(0)

What should be the PRIMARY objective for a risk practitioner performing a post-implementation review of an IT risk mitigation project?

Question 390

(0)

Which of the following is MOST important when discussing risk within an organization?

Question 381

Which of the following is the PRIMARY responsibility of the first line of defense related to computer-enabled fraud?

Providing oversight of risk management processes

Implementing processes to detect and deter fraud

Ensuring that risk and control assessments consider fraud

Monitoring the results of actions taken to mitigate fraud

Show Answer Comment (0)

Question 382

Mapping open risk issues to an enterprise risk heat map BEST facilitates:

risk response.

control monitoring.

risk identification.

risk ownership.

Show Answer Comment (0)

Question 383

Which of the following BEST enables the risk profile to serve as an effective resource to support business objectives?

Engaging external risk professionals to periodically review the risk

Prioritizing global standards over local requirements in the risk profile

Updating the risk profile with risk assessment results

Assigning quantitative values to qualitative metrics in the risk register

Show Answer Comment (0)

Question 384

Which of the following will BEST ensure that information security risk factors are mitigated when developing in-house applications?

Identify information security controls in the requirements analysis

Identify key risk indicators (KRIs) as process output.

Design key performance indicators (KPIs) for security in system specifications.

Include information security control specifications in business cases.

Show Answer Comment (0)

An organization has identified that terminated employee accounts are not disabled or deleted within the time required by corporate policy. Unsure of the reason, the organization has decided to monitor the situation for three months to obtain more information. As a result of this decision, the risk has been:

avoided.

accepted.

mitigated.

transferred.

Show Answer Comment (0)