Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 63

Question list

List of questions

Question 621

(0)

To reduce the risk introduced when conducting penetration tests, the BEST mitigating control would be to:

Question 622

(0)

Which of the following tasks should be completed prior to creating a disaster recovery plan (DRP)?

Question 623

(0)

Which of the following BEST indicates the efficiency of a process for granting access privileges?

Question 624

(0)

Several newly identified risk scenarios are being integrated into an organization's risk register. The MOST appropriate risk owner would be the individual who:

Question 625

(0)

An internal audit report reveals that not all IT application databases have encryption in place. Which of the following information would be MOST important for assessing the risk impact?

Question 626

(0)

Which of the following is the GREATEST benefit of analyzing logs collected from different systems?

Question 627

(0)

Which of the following is the BEST approach when a risk practitioner has been asked by a business unit manager for special consideration during a risk assessment of a system?

Question 628

(0)

What is the PRIMARY reason to periodically review key performance indicators (KPIs)?

Question 629

(0)

The MOST important reason for implementing change control procedures is to ensure:

Question 630

(0)

Which of the following is the PRIMARY objective of providing an aggregated view of IT risk to business management?

Question 621

To reduce the risk introduced when conducting penetration tests, the BEST mitigating control would be to:

require the vendor to sign a nondisclosure agreement

clearly define the project scope.

perform background checks on the vendor.

notify network administrators before testing

Show Answer Comment (0)

Question 622

Which of the following tasks should be completed prior to creating a disaster recovery plan (DRP)?

Conducting a business impact analysis (BIA)

Identifying the recovery response team

Procuring a recovery site

Assigning sensitivity levels to data

Show Answer Comment (0)

Question 623

Which of the following BEST indicates the efficiency of a process for granting access privileges?

Average time to grant access privileges

Number of changes in access granted to users

Average number of access privilege exceptions

Number and type of locked obsolete accounts

Show Answer Comment (0)

Question 624

Several newly identified risk scenarios are being integrated into an organization's risk register. The MOST appropriate risk owner would be the individual who:

is in charge of information security.

is responsible for enterprise risk management (ERM)

can implement remediation action plans.

is accountable for loss if the risk materializes.

Show Answer Comment (0)

Question 625

An internal audit report reveals that not all IT application databases have encryption in place. Which of the following information would be MOST important for assessing the risk impact?

The number of users who can access sensitive data

A list of unencrypted databases which contain sensitive data

The reason some databases have not been encrypted

The cost required to enforce encryption

Show Answer Comment (0)

Question 626

Which of the following is the GREATEST benefit of analyzing logs collected from different systems?

A record of incidents is maintained.

Forensic investigations are facilitated.

Security violations can be identified.

Developing threats are detected earlier.

Show Answer Comment (0)

Question 627

Which of the following is the BEST approach when a risk practitioner has been asked by a business unit manager for special consideration during a risk assessment of a system?

Conduct an abbreviated version of the assessment.

Report the business unit manager for a possible ethics violation.

Perform the assessment as it would normally be done.

Recommend an internal auditor perform the review.

Show Answer Comment (0)