Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 51

Question list

List of questions

Question 501

(0)

Which of the following will BEST help to ensure that information system controls are effective?

Question 502

(0)

Which of the following is the MOST important information to be communicated during security awareness training?

Question 503

(0)

Which of the following requirements is MOST important to include in an outsourcing contract to help ensure sensitive data stored with a service provider is secure?

Question 504

(0)

Which of the following is performed after a risk assessment is completed?

Question 505

(0)

The MOST essential content to include in an IT risk awareness program is how to:

Question 506

(0)

Which of the following would qualify as a key performance indicator (KPI)?

Question 507

(0)

An organization is planning to outsource its payroll function to an external service provider Which of the following should be the MOST important consideration when selecting the provider?

Question 508

(0)

Which of the following is a risk practitioner's BEST course of action upon learning that a control under internal review may no longer be necessary?

Question 509

(0)

Which of the following is the BEST way to ensure ongoing control effectiveness?

Question 510

(0)

Who is responsible for IT security controls that are outsourced to an external service provider?

Question 501

Which of the following will BEST help to ensure that information system controls are effective?

Responding promptly to control exceptions

Implementing compensating controls

Testing controls periodically

Automating manual controls

Show Answer Comment (0)

Question 502

Which of the following is the MOST important information to be communicated during security awareness training?

Management's expectations

Corporate risk profile

Recent security incidents

The current risk management capability

Show Answer Comment (0)

Question 503

Which of the following requirements is MOST important to include in an outsourcing contract to help ensure sensitive data stored with a service provider is secure?

A third-party assessment report of control environment effectiveness must be provided at least annually.

Incidents related to data toss must be reported to the organization immediately after they occur.

Risk assessment results must be provided to the organization at least annually.

A cyber insurance policy must be purchased to cover data loss events.

Show Answer Comment (0)

Question 504

Which of the following is performed after a risk assessment is completed?

Defining risk taxonomy

Identifying vulnerabilities

Conducting an impact analysis

Defining risk response options

Show Answer Comment (0)

Question 505

The MOST essential content to include in an IT risk awareness program is how to:

populate risk register entries and build a risk profile for management reporting.

prioritize IT-related actions by considering risk appetite and risk tolerance.

define the IT risk framework for the organization.

comply with the organization's IT risk and information security policies.

Show Answer Comment (0)

Question 506

Which of the following would qualify as a key performance indicator (KPI)?

Aggregate risk of the organization

Number of identified system vulnerabilities

Number of exception requests processed in the past 90 days

Number of attacks against the organization's website

Show Answer Comment (0)

Question 507

An organization is planning to outsource its payroll function to an external service provider Which of the following should be the MOST important consideration when selecting the provider?

Disaster recovery plan (DRP) of the system

Right to audit the provider

Internal controls to ensure data privacy

Transparency of key performance indicators (KPIs)

Show Answer Comment (0)