Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 61

Question list

List of questions

Question 601

(0)

Which of the following provides the BEST measurement of an organization's risk management maturity level?

Question 602

(0)

Which of the following statements BEST illustrates the relationship between key performance indicators (KPIs) and key control indicators (KCIs)?

Question 603

(0)

Which of the following is the GREATEST risk associated with an environment that lacks documentation of the architecture?

Question 604

(0)

The BEST way to determine the likelihood of a system availability risk scenario is by assessing the:

Question 605

(0)

An organization uses a vendor to destroy hard drives. Which of the following would BEST reduce the risk of data leakage?

Question 606

(0)

The BEST key performance indicator (KPI) for monitoring adherence to an organization's user accounts provisioning practices is the percentage of:

Question 607

(0)

Which of the following BEST enables the identification of trends in risk levels?

Question 608

(0)

While reviewing an organization's monthly change management metrics, a risk practitioner notes that the number of emergency changes has increased substantially Which of the following would be the BE

Question 609

(0)

An organization has implemented a preventive control to lock user accounts after three unsuccessful login attempts. This practice has been proven to be unproductive, and a change in the control thre

Question 610

(0)

Which of the following is the MOST effective control to maintain the integrity of system configuration files?

Question 601

Which of the following provides the BEST measurement of an organization's risk management maturity level?

Level of residual risk

The results of a gap analysis

IT alignment to business objectives

Key risk indicators (KRIs)

Show Answer Comment (0)

Question 602

Which of the following statements BEST illustrates the relationship between key performance indicators (KPIs) and key control indicators (KCIs)?

KPIs measure manual controls, while KCIs measure automated controls.

KPIs and KCIs both contribute to understanding of control effectiveness.

A robust KCI program will replace the need to measure KPIs.

KCIs are applied at the operational level while KPIs are at the strategic level.

Show Answer Comment (0)

Question 603

Which of the following is the GREATEST risk associated with an environment that lacks documentation of the architecture?

Unknown vulnerabilities

Legacy technology systems

Network isolation

Overlapping threats

Show Answer Comment (0)

Question 604

The BEST way to determine the likelihood of a system availability risk scenario is by assessing the:

availability of fault tolerant software.

strategic plan for business growth.

vulnerability scan results of critical systems.

redundancy of technical infrastructure.

Show Answer Comment (0)

Question 605

An organization uses a vendor to destroy hard drives. Which of the following would BEST reduce the risk of data leakage?

Require the vendor to degauss the hard drives

Implement an encryption policy for the hard drives.

Require confirmation of destruction from the IT manager.

Use an accredited vendor to dispose of the hard drives.

Show Answer Comment (0)

Question 606

The BEST key performance indicator (KPI) for monitoring adherence to an organization's user accounts provisioning practices is the percentage of:

accounts without documented approval

user accounts with default passwords

active accounts belonging to former personnel

accounts with dormant activity.

Show Answer Comment (0)

Question 607

Which of the following BEST enables the identification of trends in risk levels?

Correlation between risk levels and key risk indicators (KRIs) is positive.

Measurements for key risk indicators (KRIs) are repeatable

Quantitative measurements are used for key risk indicators (KRIs).

Qualitative definitions for key risk indicators (KRIs) are used.

Show Answer Comment (0)

While reviewing an organization's monthly change management metrics, a risk practitioner notes that the number of emergency changes has increased substantially Which of the following would be the BEST approach for the risk practitioner to take?

Temporarily suspend emergency changes.

Document the control deficiency in the risk register.

Conduct a root cause analysis.

Continue monitoring change management metrics.

Show Answer Comment (0)

Question 609

An organization has implemented a preventive control to lock user accounts after three unsuccessful login attempts. This practice has been proven to be unproductive, and a change in the control threshold value has been recommended. Who should authorize changing this threshold?

Risk owner

IT security manager

IT system owner

Control owner

Show Answer Comment (0)