Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 53

Question list

List of questions

Question 521

(0)

A risk assessment indicates the residual risk associated with a new bring your own device (BYOD) program is within organizational risk tolerance. Which of the following should the risk practitioner

Question 522

(0)

The PRIMARY benefit of classifying information assets is that it helps to:

Question 523

(0)

A payroll manager discovers that fields in certain payroll reports have been modified without authorization. Which of the following control weaknesses could have contributed MOST to this problem?

Question 524

(0)

Once a risk owner has decided to implement a control to mitigate risk, it is MOST important to develop:

Question 525

(0)

After migrating a key financial system to a new provider, it was discovered that a developer could gain access to the production environment. Which of the following is the BEST way to mitigate the r

Question 526

(0)

Which of the following is the MOST important data attribute of key risk indicators (KRIs)?

Question 527

(0)

Prior to selecting key performance indicators (KPIs), itis MOST important to ensure:

Question 528

(0)

Which of the following is MOST important to the effective monitoring of key risk indicators (KRIS)?

Question 529

(0)

Which of the following would BEST enable a risk practitioner to embed risk management within the organization?

Question 530

(0)

Which of the following is MOST helpful in determining the effectiveness of an organization's IT risk mitigation efforts?

Question 521

A risk assessment indicates the residual risk associated with a new bring your own device (BYOD) program is within organizational risk tolerance. Which of the following should the risk practitioner recommend be done NEXT?

Implement targeted awareness training for new BYOD users.

Implement monitoring to detect control deterioration.

Identify log sources to monitor BYOD usage and risk impact.

Reduce the risk tolerance level.

Show Answer Comment (0)

Question 522

The PRIMARY benefit of classifying information assets is that it helps to:

communicate risk to senior management

assign risk ownership

facilitate internal audit

determine the appropriate level of control

Show Answer Comment (0)

Question 523

A payroll manager discovers that fields in certain payroll reports have been modified without authorization. Which of the following control weaknesses could have contributed MOST to this problem?

The user requirements were not documented.

Payroll files were not under the control of a librarian.

The programmer had access to the production programs.

The programmer did not involve the user in testing.

Show Answer Comment (0)

Question 524

Once a risk owner has decided to implement a control to mitigate risk, it is MOST important to develop:

a process for measuring and reporting control performance.

an alternate control design in case of failure of the identified control.

a process for bypassing control procedures in case of exceptions.

procedures to ensure the effectiveness of the control.

Show Answer Comment (0)

Question 525

After migrating a key financial system to a new provider, it was discovered that a developer could gain access to the production environment. Which of the following is the BEST way to mitigate the risk in this situation?

Escalate the issue to the service provider.

Re-certify the application access controls.

Remove the developer's access.

Review the results of pre-migration testing.

Show Answer Comment (0)