Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 44

Question list

List of questions

Question 431

(0)

Which of the following is the MOST important enabler of effective risk management?

Question 432

(0)

Which of the following is MOST important when defining controls?

Question 433

(0)

A risk practitioner is reviewing a vendor contract and finds there is no clause to control privileged access to the organization's systems by vendor employees. Which of the following is the risk pra

Question 434

(0)

Which of the following is the PRIMARY objective for automating controls?

Question 435

(0)

Which of the following is the GREATEST risk associated with the use of data analytics?

Question 436

(0)

An IT operations team implements disaster recovery controls based on decisions from application owners regarding the level of resiliency needed. Who is the risk owner in this scenario?

Question 437

(0)

Which of the following is MOST important when developing risk scenarios?

Question 438

(0)

An organization has initiated a project to implement an IT risk management program for the first time. The BEST time for the risk practitioner to start populating the risk register is when:

Question 439

(0)

Which of the following is the PRIMARY reason for conducting peer reviews of risk analysis?

Question 440

(0)

Which of the following would be the GREATEST concern related to data privacy when implementing an Internet of Things (loT) solution that collects personally identifiable information (Pll)?

Question 431

Which of the following is the MOST important enabler of effective risk management?

User awareness of policies and procedures

Implementation of proper controls

Senior management support

Continuous monitoring of threats and vulnerabilities

Show Answer Comment (0)

Question 432

Which of the following is MOST important when defining controls?

Identifying monitoring mechanisms

Including them in the risk register

Aligning them with business objectives

Prototyping compensating controls

Show Answer Comment (0)

A risk practitioner is reviewing a vendor contract and finds there is no clause to control privileged access to the organization's systems by vendor employees. Which of the following is the risk practitioner's BEST course of action?

Contact the control owner to determine if a gap in controls exists.

Add this concern to the risk register and highlight it for management review.

Report this concern to the contracts department for further action.

Document this concern as a threat and conduct an impact analysis.

Show Answer Comment (0)

Question 434

Which of the following is the PRIMARY objective for automating controls?

Improving control process efficiency

Facilitating continuous control monitoring

Complying with functional requirements

Reducing the need for audit reviews

Show Answer Comment (0)

Question 435

Which of the following is the GREATEST risk associated with the use of data analytics?

Distributed data sources

Manual data extraction

Incorrect data selection

Excessive data volume

Show Answer Comment (0)

Question 436

An IT operations team implements disaster recovery controls based on decisions from application owners regarding the level of resiliency needed. Who is the risk owner in this scenario?

Business resilience manager

Disaster recovery team lead

Application owner

IT operations manager

Show Answer Comment (0)

Question 437

Which of the following is MOST important when developing risk scenarios?

The scenarios are based on industry best practice.

The scenarios focus on current vulnerabilities.

The scenarios are relevant to the organization.

The scenarios include technical consequences.

Show Answer Comment (0)

Question 438

An organization has initiated a project to implement an IT risk management program for the first time. The BEST time for the risk practitioner to start populating the risk register is when:

identifying risk scenarios.

determining the risk strategy.

calculating impact and likelihood.

completing the controls catalog.

Show Answer Comment (0)

Question 439

Which of the following is the PRIMARY reason for conducting peer reviews of risk analysis?

To enhance compliance with standards

To minimize subjectivity of assessments

To increase consensus among peers

To provide assessments for benchmarking

Show Answer Comment (0)

Question 440

Which of the following would be the GREATEST concern related to data privacy when implementing an Internet of Things (loT) solution that collects personally identifiable information (Pll)?

A privacy impact assessment has not been completed.

Data encryption methods apply to a subset of Pll obtained.

The data privacy officer was not consulted.

Insufficient access controls are used on the loT devices.

Show Answer Comment (0)

Total 1.200 questions