Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 69

Question list

List of questions

Question 681

(0)

Which of the following is the PRIMARY reason for monitoring activities performed in a production database environment?

Question 682

(0)

Which of the following will BEST support management reporting on risk?

Question 683

(0)

Which of The following is the BEST way to confirm whether appropriate automated controls are in place within a recently implemented system?

Question 684

(0)

Management has required information security awareness training to reduce the risk associated with credential compromise. What is the BEST way to assess the effectiveness of the training?

Question 685

(0)

Which of the following would be a risk practitioner'$ BEST recommendation to help ensure cyber risk is assessed and reflected in the enterprise-level risk profile?

Question 686

(0)

An organization has detected unauthorized logins to its client database servers. Which of the following should be of GREATEST concern?

Question 687

(0)

Which of the following BEST assists in justifying an investment in automated controls?

Question 688

(0)

The BEST key performance indicator (KPI) to measure the effectiveness of a backup process would be the number of:

Question 689

(0)

The risk associated with an asset after controls are applied can be expressed as:

Question 690

(0)

Who should be PRIMARILY responsible for establishing an organization's IT risk culture?

Question 681

Which of the following is the PRIMARY reason for monitoring activities performed in a production database environment?

Ensuring that database changes are correctly applied

Enforcing that changes are authorized

Deterring illicit actions of database administrators

Preventing system developers from accessing production data

Show Answer Comment (0)

Question 682

Which of the following will BEST support management reporting on risk?

Control self-assessment (CSA)

Risk policy requirements

A risk register

Key performance indicators (KPIs)

Show Answer Comment (0)

Question 683

Which of The following is the BEST way to confirm whether appropriate automated controls are in place within a recently implemented system?

Perform a post-implementation review.

Conduct user acceptance testing.

Review the key performance indicators (KPIs).

Interview process owners.

Show Answer Comment (0)

Question 684

Management has required information security awareness training to reduce the risk associated with credential compromise. What is the BEST way to assess the effectiveness of the training?

Conduct social engineering testing.

Audit security awareness training materials.

Administer an end-of-training quiz.

Perform a vulnerability assessment.

Show Answer Comment (0)

Question 685

Which of the following would be a risk practitioner'$ BEST recommendation to help ensure cyber risk is assessed and reflected in the enterprise-level risk profile?

Manage cyber risk according to the organization's risk management framework.

Define cyber roles and responsibilities across the organization

Conduct cyber risk awareness training tailored specifically for senior management

Implement a cyber risk program based on industry best practices

Show Answer Comment (0)