Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 47

Question list

List of questions

Question 461

(0)

Which of the following BEST enables a proactive approach to minimizing the potential impact of unauthorized data disclosure?

Question 462

(0)

Which of the following is the PRIMARY reason to establish the root cause of an IT security incident?

Question 463

(0)

Which of the following is the BEST indicator of the effectiveness of a control action plan's implementation?

Question 464

(0)

Which of the following is MOST important to include in a Software as a Service (SaaS) vendor agreement?

Question 465

(0)

Which of the following should be the PRIMARY focus of an independent review of a risk management process?

Question 466

(0)

To minimize risk in a software development project, when is the BEST time to conduct a risk analysis?

Question 467

(0)

A large organization needs to report risk at all levels for a new centralized visualization project to reduce cost and improve performance. Which of the following would MOST effectively represent th

Question 468

(0)

An organization has received notification that it is a potential victim of a cybercrime that may have compromised sensitive customer data. What should be The FIRST course of action?

Question 469

(0)

The PRIMARY purpose of vulnerability assessments is to:

Question 470

(0)

Which of the following BEST facilitates the development of effective IT risk scenarios?

Question 461

Which of the following BEST enables a proactive approach to minimizing the potential impact of unauthorized data disclosure?

Key risk indicators (KRIs)

Data backups

Incident response plan

Cyber insurance

Show Answer Comment (0)

Question 462

Which of the following is the PRIMARY reason to establish the root cause of an IT security incident?

Prepare a report for senior management.

Assign responsibility and accountability for the incident.

Update the risk register.

Avoid recurrence of the incident.

Show Answer Comment (0)

Question 463

Which of the following is the BEST indicator of the effectiveness of a control action plan's implementation?

Increased number of controls

Reduced risk level

Increased risk appetite

Stakeholder commitment

Show Answer Comment (0)

Question 464

Which of the following is MOST important to include in a Software as a Service (SaaS) vendor agreement?

An annual contract review

A service level agreement (SLA)

A requirement to adopt an established risk management framework

A requirement to provide an independent audit report

Show Answer Comment (0)

Question 465

Which of the following should be the PRIMARY focus of an independent review of a risk management process?

Accuracy of risk tolerance levels

Consistency of risk process results

Participation of stakeholders

Maturity of the process

Show Answer Comment (0)

Question 466

To minimize risk in a software development project, when is the BEST time to conduct a risk analysis?

During the business requirement definitions phase

Before periodic steering committee meetings

At each stage of the development life cycle

During the business case development

Show Answer Comment (0)

A large organization needs to report risk at all levels for a new centralized visualization project to reduce cost and improve performance. Which of the following would MOST effectively represent the overall risk of the project to senior management?

Aggregated key performance indicators (KPls)

Key risk indicators (KRIs)

Centralized risk register

Risk heat map

Show Answer Comment (0)

Question 468

An organization has received notification that it is a potential victim of a cybercrime that may have compromised sensitive customer data. What should be The FIRST course of action?

Invoke the incident response plan.

Determine the business impact.

Conduct a forensic investigation.

Invoke the business continuity plan (BCP).

Show Answer Comment (0)