Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 49

Question list

List of questions

Question 481

(0)

An organization is unable to implement a multi-factor authentication requirement until the next fiscal year due to budget constraints. Consequently, a policy exception must be submitted. Which of th

Question 482

(0)

Business areas within an organization have engaged various cloud service providers directly without assistance from the IT department. What should the risk practitioner do?

Question 483

(0)

A bank is experiencing an increasing incidence of customer identity theft. Which of the following is the BEST way to mitigate this risk?

Question 484

(0)

Which of the following is the BEST method for identifying vulnerabilities?

Question 485

(0)

An organization striving to be on the leading edge in regard to risk monitoring would MOST likely implement:

Question 486

(0)

Which of the following is a crucial component of a key risk indicator (KRI) to ensure appropriate action is taken to mitigate risk?

Question 487

(0)

Which of the following would MOST likely cause a risk practitioner to reassess risk scenarios?

Question 488

(0)

Which of the following should be the risk practitioner s FIRST course of action when an organization has decided to expand into new product areas?

Question 489

(0)

An organization's HR department has implemented a policy requiring staff members to take a minimum of five consecutive days leave per year to mitigate the risk of malicious insider activities. Which

Question 490

(0)

An organization operates in a jurisdiction where heavy fines are imposed for leakage of customer data. Which of the following provides the BEST input to assess the inherent risk impact?

Question 481

An organization is unable to implement a multi-factor authentication requirement until the next fiscal year due to budget constraints. Consequently, a policy exception must be submitted. Which of the following is MOST important to include in the analysis of the exception?

Sections of the policy that may justify not implementing the requirement

Risk associated with the inability to implement the requirement

Budget justification to implement the new requirement during the current year

Industry best practices with respect to implementation of the proposed control

Show Answer Comment (0)

Question 482

Business areas within an organization have engaged various cloud service providers directly without assistance from the IT department. What should the risk practitioner do?

Recommend the IT department remove access to the cloud services.

Engage with the business area managers to review controls applied.

Escalate to the risk committee.

Recommend a risk assessment be conducted.

Show Answer Comment (0)

Question 483

A bank is experiencing an increasing incidence of customer identity theft. Which of the following is the BEST way to mitigate this risk?

Implement monitoring techniques.

Implement layered security.

Outsource to a local processor.

Conduct an awareness campaign.

Show Answer Comment (0)

Question 484

Which of the following is the BEST method for identifying vulnerabilities?

Batch job failure monitoring

Periodic network scanning

Annual penetration testing

Risk assessments

Show Answer Comment (0)

Question 485

An organization striving to be on the leading edge in regard to risk monitoring would MOST likely implement:

procedures to monitor the operation of controls.

a tool for monitoring critical activities and controls.

real-time monitoring of risk events and control exceptions.

monitoring activities for all critical assets.

Perform a controls assessment.

Show Answer Comment (0)

Question 486

Which of the following is a crucial component of a key risk indicator (KRI) to ensure appropriate action is taken to mitigate risk?

Management intervention

Risk appetite

Board commentary

Escalation triggers

Show Answer Comment (0)

Question 487

Which of the following would MOST likely cause a risk practitioner to reassess risk scenarios?

A change in the risk management policy

A major security incident

A change in the regulatory environment

An increase in intrusion attempts

Show Answer Comment (0)

Question 488

Which of the following should be the risk practitioner s FIRST course of action when an organization has decided to expand into new product areas?

Identify any new business objectives with stakeholders.

Present a business case for new controls to stakeholders.

Revise the organization's risk and control policy.

Review existing risk scenarios with stakeholders.

Show Answer Comment (0)

Question 489

An organization's HR department has implemented a policy requiring staff members to take a minimum of five consecutive days leave per year to mitigate the risk of malicious insider activities. Which of the following is the BEST key performance indicator (KPI) of the effectiveness of this policy?

Number of malicious activities occurring during staff members leave

Percentage of staff members seeking exception to the policy

Percentage of staff members taking leave according to the policy

Financial loss incurred due to malicious activities during staff members' leave

Show Answer Comment (0)

Question 490

An organization operates in a jurisdiction where heavy fines are imposed for leakage of customer data. Which of the following provides the BEST input to assess the inherent risk impact?

Number of customer records held

Number of databases that host customer data

Number of encrypted customer databases

Number of staff members having access to customer data

Show Answer Comment (0)

Total 1.200 questions