Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 46

Question list

List of questions

Question 451

(0)

An organization has decided to outsource a web application, and customer data will be stored in the vendor's public cloud. To protect customer data, it is MOST important to ensure which of the follo

Question 452

(0)

Which of the following is the PRIMARY reason to establish the root cause of an IT security incident?

Question 453

(0)

Which of the following BEST enables a proactive approach to minimizing the potential impact of unauthorized data disclosure?

Question 454

(0)

IT disaster recovery point objectives (RPOs) should be based on the:

Question 455

(0)

An IT risk practitioner is evaluating an organization's change management controls over the last six months. The GREATEST concern would be an increase in:

Question 456

(0)

A key risk indicator (KRI) threshold has reached the alert level, indicating data leakage incidents are highly probable. What should be the risk practitioner's FIRST course of action?

Question 457

(0)

Which of the following is MOST helpful to review when identifying risk scenarios associated with the adoption of Internet of Things (loT) technology in an organization?

Question 458

(0)

Which of the following is MOST helpful in developing key risk indicator (KRl) thresholds?

Question 459

(0)

Read' rights to application files in a controlled server environment should be approved by the:

Question 460

(0)

Which of the following is the MOST important objective of regularly presenting the project risk register to the project steering committee?

Question 451

An organization has decided to outsource a web application, and customer data will be stored in the vendor's public cloud. To protect customer data, it is MOST important to ensure which of the following?

The organization's incident response procedures have been updated.

The vendor stores the data in the same jurisdiction.

Administrative access is only held by the vendor.

The vendor's responsibilities are defined in the contract.

Show Answer Comment (0)

Question 452

Which of the following is the PRIMARY reason to establish the root cause of an IT security incident?

Update the risk register.

Assign responsibility and accountability for the incident.

Prepare a report for senior management.

Avoid recurrence of the incident.

Show Answer Comment (0)

Question 453

Which of the following BEST enables a proactive approach to minimizing the potential impact of unauthorized data disclosure?

Cyber insurance

Data backups

Incident response plan

Key risk indicators (KRIs)

Show Answer Comment (0)

Question 454

IT disaster recovery point objectives (RPOs) should be based on the:

maximum tolerable downtime.

maximum tolerable loss of data.

need of each business unit.

type of business.

Show Answer Comment (0)

Question 455

An IT risk practitioner is evaluating an organization's change management controls over the last six months. The GREATEST concern would be an increase in:

rolled back changes below management's thresholds.

change-related exceptions per month.

the average implementation time for changes.

number of user stories approved for implementation.

Show Answer Comment (0)

Question 456

A key risk indicator (KRI) threshold has reached the alert level, indicating data leakage incidents are highly probable. What should be the risk practitioner's FIRST course of action?

Update the KRI threshold.

Recommend additional controls.

Review incident handling procedures.

Perform a root cause analysis.

Show Answer Comment (0)

Question 457

Which of the following is MOST helpful to review when identifying risk scenarios associated with the adoption of Internet of Things (loT) technology in an organization?

The business case for the use of loT

The loT threat landscape

Policy development for loT

The network that loT devices can access

Show Answer Comment (0)