Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 65

Question list

List of questions

Question 641

(0)

Which of the following will BEST help in communicating strategic risk priorities?

Question 642

(0)

The BEST indication that risk management is effective is when risk has been reduced to meet:

Question 643

(0)

What is the PRIMARY purpose of a business impact analysis (BIA)?

Question 644

(0)

Which of the following is the MOST important factor when deciding on a control to mitigate risk exposure?

Question 645

(0)

Which of the following would be MOST helpful to an information security management team when allocating resources to mitigate exposures?

Question 646

(0)

Which of the following is the MOST important topic to cover in a risk awareness training program for all staff?

Question 647

(0)

Upon learning that the number of failed back-up attempts continually exceeds the current risk threshold, the risk practitioner should:

Question 648

(0)

A newly hired risk practitioner finds that the risk register has not been updated in the past year. What is the risk practitioner's BEST course of action?

Question 649

(0)

Which of the following should be implemented to BEST mitigate the risk associated with infrastructure updates?

Question 650

(0)

An organization practices the principle of least privilege. To ensure access remains appropriate, application owners should be required to review user access rights on a regular basis by obtaining:

Question 641

Which of the following will BEST help in communicating strategic risk priorities?

Heat map

Business impact analysis (BIA)

Balanced Scorecard

Risk register

Show Answer Comment (0)

Question 642

The BEST indication that risk management is effective is when risk has been reduced to meet:

risk levels.

risk budgets.

risk appetite.

risk capacity.

Show Answer Comment (0)

Question 643

What is the PRIMARY purpose of a business impact analysis (BIA)?

To determine the likelihood and impact of threats to business operations

To identify important business processes in the organization

To estimate resource requirements for related business processes

To evaluate the priority of business operations in case of disruption

Show Answer Comment (0)

Question 644

Which of the following is the MOST important factor when deciding on a control to mitigate risk exposure?

Relevance to the business process

Regulatory compliance requirements

Cost-benefit analysis

Comparison against best practice

Show Answer Comment (0)

Question 645

Which of the following would be MOST helpful to an information security management team when allocating resources to mitigate exposures?

Relevant risk case studies

Internal audit findings

Risk assessment results

Penetration testing results

Show Answer Comment (0)

Question 646

Which of the following is the MOST important topic to cover in a risk awareness training program for all staff?

Internal and external information security incidents

The risk department's roles and responsibilities

Policy compliance requirements and exceptions process

The organization's information security risk profile

Show Answer Comment (0)

Question 647

Upon learning that the number of failed back-up attempts continually exceeds the current risk threshold, the risk practitioner should:

inquire about the status of any planned corrective actions

keep monitoring the situation as there is evidence that this is normal

adjust the risk threshold to better reflect actual performance

initiate corrective action to address the known deficiency

Show Answer Comment (0)

Question 648

A newly hired risk practitioner finds that the risk register has not been updated in the past year. What is the risk practitioner's BEST course of action?

Identify changes in risk factors and initiate risk reviews.

Engage an external consultant to redesign the risk management process.

Outsource the process for updating the risk register.

Implement a process improvement and replace the old risk register.

Show Answer Comment (0)

Question 649

Which of the following should be implemented to BEST mitigate the risk associated with infrastructure updates?

Role-specific technical training

Change management audit

Change control process

Risk assessment

Show Answer Comment (0)

Question 650

An organization practices the principle of least privilege. To ensure access remains appropriate, application owners should be required to review user access rights on a regular basis by obtaining:

business purpose documentation and software license counts

an access control matrix and approval from the user's manager

documentation indicating the intended users of the application

security logs to determine the cause of invalid login attempts

Show Answer Comment (0)

Total 1.200 questions