Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 50

Question list

List of questions

Question 491

(0)

An organization is increasingly concerned about loss of sensitive data and asks the risk practitioner to assess the current risk level. Which of the following should the risk practitioner do FIRST?

Question 492

(0)

A risk practitioner has been notified that an employee sent an email in error containing customers' personally identifiable information (Pll). Which of the following is the risk practitioner's BEST

Question 493

(0)

Reviewing which of the following provides the BEST indication of an organizations risk tolerance?

Question 494

(0)

Which of the following is MOST essential for an effective change control environment?

Question 495

(0)

The PRIMARY reason for periodically monitoring key risk indicators (KRIs) is to:

Question 496

(0)

Which of the following is the GREATEST risk associated with the transition of a sensitive data backup solution from on-premise to a cloud service provider?

Question 497

(0)

For no apparent reason, the time required to complete daily processing for a legacy application is approaching a risk threshold. Which of the following activities should be performed FIRST?

Question 498

(0)

An organization plans to migrate sensitive information to a public cloud infrastructure. Which of the following is the GREATEST security risk in this scenario?

Question 499

(0)

Which of the following is the MOST important reason to create risk scenarios?

Question 500

(0)

The MAIN purpose of a risk register is to:

Question 491

An organization is increasingly concerned about loss of sensitive data and asks the risk practitioner to assess the current risk level. Which of the following should the risk practitioner do FIRST?

Identify staff members who have access to the organization's sensitive data.

Identify locations where the organization's sensitive data is stored.

Identify risk scenarios and owners associated with possible data loss vectors.

Identify existing data loss controls and their levels of effectiveness.

Show Answer Comment (0)

A risk practitioner has been notified that an employee sent an email in error containing customers' personally identifiable information (Pll). Which of the following is the risk practitioner's BEST course of action?

Report it to the chief risk officer.

Advise the employee to forward the email to the phishing team.

follow incident reporting procedures.

Advise the employee to permanently delete the email.

Show Answer Comment (0)

Question 493

Reviewing which of the following provides the BEST indication of an organizations risk tolerance?

Risk sharing strategy

Risk transfer agreements

Risk policies

Risk assessments

Show Answer Comment (0)

Question 494

Which of the following is MOST essential for an effective change control environment?

Business management approval of change requests

Separation of development and production environments

Requirement of an implementation rollback plan

IT management review of implemented changes

Show Answer Comment (0)

Question 495

The PRIMARY reason for periodically monitoring key risk indicators (KRIs) is to:

rectify errors in results of KRIs.

detect changes in the risk profile.

reduce costs of risk mitigation controls.

continually improve risk assessments.

Show Answer Comment (0)

Question 496

Which of the following is the GREATEST risk associated with the transition of a sensitive data backup solution from on-premise to a cloud service provider?

More complex test restores

Inadequate service level agreement (SLA) with the provider

More complex incident response procedures

Inadequate data encryption

Show Answer Comment (0)

Question 497

For no apparent reason, the time required to complete daily processing for a legacy application is approaching a risk threshold. Which of the following activities should be performed FIRST?

Temporarily increase the risk threshold.

Suspend processing to investigate the problem.

Initiate a feasibility study for a new application.

Conduct a root-cause analysis.

Show Answer Comment (0)

Question 498

An organization plans to migrate sensitive information to a public cloud infrastructure. Which of the following is the GREATEST security risk in this scenario?

Data may be commingled with other tenants' data.

System downtime does not meet the organization's thresholds.

The infrastructure will be managed by the public cloud administrator.

The cloud provider is not independently certified.

Show Answer Comment (0)