Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 45

Question list

List of questions

Question 441

(0)

Which of the following will MOST improve stakeholders' understanding of the effect of a potential threat?

Question 442

(0)

A risk practitioner has just learned about new done FIRST?

Question 443

(0)

When testing the security of an IT system, il is MOST important to ensure that;

Question 444

(0)

Which of the following risk scenarios would be the GREATEST concern as a result of a single sign-on implementation?

Question 445

(0)

Which of the following would provide the MOST objective assessment of the effectiveness of an organization's security controls?

Question 446

(0)

A risk owner has identified a risk with high impact and very low likelihood. The potential loss is covered by insurance. Which of the following should the risk practitioner do NEXT?

Question 447

(0)

A maturity model will BEST indicate:

Question 448

(0)

An organization has recently updated its disaster recovery plan (DRP). Which of the following would be the GREATEST risk if the new plan is not tested?

Question 449

(0)

What are the MOST important criteria to consider when developing a data classification scheme to facilitate risk assessment and the prioritization of risk mitigation activities?

Question 450

(0)

A control owner identifies that the organization's shared drive contains personally identifiable information (Pll) that can be accessed by all personnel. Which of the following is the MOST effective

Question 441

Which of the following will MOST improve stakeholders' understanding of the effect of a potential threat?

Establishing a risk management committee

Updating the organization's risk register to reflect the new threat

Communicating the results of the threat impact analysis

Establishing metrics to assess the effectiveness of the responses

Show Answer Comment (0)

Question 442

A risk practitioner has just learned about new done FIRST?

Notify executive management.

Analyze the impact to the organization.

Update the IT risk register.

Design IT risk mitigation plans.

Show Answer Comment (0)

Question 443

When testing the security of an IT system, il is MOST important to ensure that;

tests are conducted after business hours.

operators are unaware of the test.

external experts execute the test.

agreement is obtained from stakeholders.

Show Answer Comment (0)

Question 444

Which of the following risk scenarios would be the GREATEST concern as a result of a single sign-on implementation?

User access may be restricted by additional security.

Unauthorized access may be gained to multiple systems.

Security administration may become more complex.

User privilege changes may not be recorded.

Show Answer Comment (0)

Question 445

Which of the following would provide the MOST objective assessment of the effectiveness of an organization's security controls?

An internal audit

Security operations center review

Internal penetration testing

A third-party audit

Show Answer Comment (0)

Question 446

A risk owner has identified a risk with high impact and very low likelihood. The potential loss is covered by insurance. Which of the following should the risk practitioner do NEXT?

Recommend avoiding the risk.

Validate the risk response with internal audit.

Update the risk register.

Evaluate outsourcing the process.

Show Answer Comment (0)

Question 447

A maturity model will BEST indicate:

confidentiality and integrity.

effectiveness and efficiency.

availability and reliability.

certification and accreditation.

Show Answer Comment (0)

Question 448

An organization has recently updated its disaster recovery plan (DRP). Which of the following would be the GREATEST risk if the new plan is not tested?

External resources may need to be involved.

Data privacy regulations may be violated.

Recovery costs may increase significantly.

Service interruptions may be longer than anticipated.

Show Answer Comment (0)

Question 449

What are the MOST important criteria to consider when developing a data classification scheme to facilitate risk assessment and the prioritization of risk mitigation activities?

Mitigation and control value

Volume and scope of data generated daily

Business criticality and sensitivity

Recovery point objective (RPO) and recovery time objective (RTO)

Show Answer Comment (0)

A control owner identifies that the organization's shared drive contains personally identifiable information (Pll) that can be accessed by all personnel. Which of the following is the MOST effective risk response?

Protect sensitive information with access controls.

Implement a data loss prevention (DLP) solution.

Re-communicate the data protection policy.

Implement a data encryption solution.

Show Answer Comment (0)

Total 1.200 questions