Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 67

Question list

List of questions

Question 661

(0)

A risk manager has determined there is excessive risk with a particular technology. Who is the BEST person to own the unmitigated risk of the technology?

Question 662

(0)

An organization learns of a new ransomware attack affecting organizations worldwide. Which of the following should be done FIRST to reduce the likelihood of infection from the attack?

Question 663

(0)

Which of the following is the MOST important objective of establishing an enterprise risk management (ERM) function within an organization?

Question 664

(0)

Which of the following is the BEST key control indicator (KCI) for a vulnerability management program?

Question 665

(0)

Who is BEST suited to determine whether a new control properly mitigates data loss risk within a system?

Question 666

(0)

Which of the following BEST facilitates the mitigation of identified gaps between current and desired risk environment states?

Question 667

(0)

An application runs a scheduled job that compiles financial data from multiple business systems and updates the financial reporting system. If this job runs too long, it can delay financial reportin

Question 668

(0)

Which of the following roles is BEST suited to help a risk practitioner understand the impact of IT-related events on business objectives?

Question 669

(0)

Which of the following is the MOST effective control to ensure user access is maintained on a least-privilege basis?

Question 670

(0)

A deficient control has been identified which could result in great harm to an organization should a low frequency threat event occur. When communicating the associated risk to senior management the

Question 661

A risk manager has determined there is excessive risk with a particular technology. Who is the BEST person to own the unmitigated risk of the technology?

IT system owner

Chief financial officer

Chief risk officer

Business process owner

Show Answer Comment (0)

Question 662

An organization learns of a new ransomware attack affecting organizations worldwide. Which of the following should be done FIRST to reduce the likelihood of infection from the attack?

Identify systems that are vulnerable to being exploited by the attack.

Confirm with the antivirus solution vendor whether the next update will detect the attack.

Verify the data backup process and confirm which backups are the most recent ones available.

Obtain approval for funding to purchase a cyber insurance plan.

Show Answer Comment (0)

Question 663

Which of the following is the MOST important objective of establishing an enterprise risk management (ERM) function within an organization?

To have a unified approach to risk management across the organization

To have a standard risk management process for complying with regulations

To optimize risk management resources across the organization

To ensure risk profiles are presented in a consistent format within the organization

Show Answer Comment (0)

Question 664

Which of the following is the BEST key control indicator (KCI) for a vulnerability management program?

Percentage of high-risk vulnerabilities missed

Number of high-risk vulnerabilities outstanding

Defined thresholds for high-risk vulnerabilities

Percentage of high-risk vulnerabilities addressed

Show Answer Comment (0)

Question 665

Who is BEST suited to determine whether a new control properly mitigates data loss risk within a system?

Data owner

Control owner

Risk owner

System owner

Show Answer Comment (0)

Question 666

Which of the following BEST facilitates the mitigation of identified gaps between current and desired risk environment states?

Develop a risk treatment plan.

Validate organizational risk appetite.

Review results of prior risk assessments.

Include the current and desired states in the risk register.

Show Answer Comment (0)

An application runs a scheduled job that compiles financial data from multiple business systems and updates the financial reporting system. If this job runs too long, it can delay financial reporting. Which of the following is the risk practitioner's BEST recommendation?

Implement database activity and capacity monitoring.

Ensure the business is aware of the risk.

Ensure the enterprise has a process to detect such situations.

Consider providing additional system resources to this job.

Show Answer Comment (0)

Question 668

Which of the following roles is BEST suited to help a risk practitioner understand the impact of IT-related events on business objectives?

IT management

Internal audit

Process owners

Senior management

Show Answer Comment (0)

Question 669

Which of the following is the MOST effective control to ensure user access is maintained on a least-privilege basis?

User authorization

User recertification

Change log review

Access log monitoring

Show Answer Comment (0)

Question 670

A deficient control has been identified which could result in great harm to an organization should a low frequency threat event occur. When communicating the associated risk to senior management the risk practitioner should explain:

mitigation plans for threat events should be prepared in the current planning period.

this risk scenario is equivalent to more frequent but lower impact risk scenarios.

the current level of risk is within tolerance.

an increase in threat events could cause a loss sooner than anticipated.

Show Answer Comment (0)

Total 1.200 questions