Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 74

Question list

List of questions

Question 731

(0)

Which of the following BEST mitigates the risk of sensitive personal data leakage from a software development environment?

Question 732

(0)

Which of the following should be an element of the risk appetite of an organization?

Question 733

(0)

In an organization where each division manages risk independently, which of the following would BEST enable management of risk at the enterprise level?

Question 734

(0)

Which of the following would require updates to an organization's IT risk register?

Question 735

(0)

Which of the following controls BEST helps to ensure that transaction data reaches its destination?

Question 736

(0)

Which of the following is the BEST control to detect an advanced persistent threat (APT)?

Question 737

(0)

Which of the following BEST supports ethical IT risk management practices?

Question 738

(0)

Which of the following is the MOST effective way to integrate risk and compliance management?

Question 739

(0)

A business unit is implementing a data analytics platform to enhance its customer relationship management (CRM) system primarily to process data that has been provided by its customers. Which of the

Question 740

(0)

Which of the following should be the MOST important consideration when performing a vendor risk assessment?

Question 731

Which of the following BEST mitigates the risk of sensitive personal data leakage from a software development environment?

Tokenized personal data only in test environments

Data loss prevention tools (DLP) installed in passive mode

Anonymized personal data in non-production environments

Multi-factor authentication for access to non-production environments

Show Answer Comment (0)

Question 732

Which of the following should be an element of the risk appetite of an organization?

The effectiveness of compensating controls

The enterprise's capacity to absorb loss

The residual risk affected by preventive controls

The amount of inherent risk considered appropriate

Show Answer Comment (0)

Question 733

In an organization where each division manages risk independently, which of the following would BEST enable management of risk at the enterprise level?

A standardized risk taxonomy

A list of control deficiencies

An enterprise risk ownership policy

An updated risk tolerance metric

Show Answer Comment (0)

Question 734

Which of the following would require updates to an organization's IT risk register?

Discovery of an ineffectively designed key IT control

Management review of key risk indicators (KRls)

Changes to the team responsible for maintaining the register

Completion of the latest internal audit

Show Answer Comment (0)

Question 735

Which of the following controls BEST helps to ensure that transaction data reaches its destination?

Securing the network from attacks

Providing acknowledgments from receiver to sender

Digitally signing individual messages

Encrypting data-in-transit

Show Answer Comment (0)

Question 736

Which of the following is the BEST control to detect an advanced persistent threat (APT)?

Utilizing antivirus systems and firewalls

Conducting regular penetration tests

Monitoring social media activities

Implementing automated log monitoring

Show Answer Comment (0)

Question 737

Which of the following BEST supports ethical IT risk management practices?

Robust organizational communication channels

Mapping of key risk indicators (KRIs) to corporate strategy

Capability maturity models integrated with risk management frameworks

Rigorously enforced operational service level agreements (SLAs)

Show Answer Comment (0)

Question 738

Which of the following is the MOST effective way to integrate risk and compliance management?

Embedding risk management into compliance decision-making

Designing corrective actions to improve risk response capabilities

Embedding risk management into processes that are aligned with business drivers

Conducting regular self-assessments to verify compliance

Show Answer Comment (0)

A business unit is implementing a data analytics platform to enhance its customer relationship management (CRM) system primarily to process data that has been provided by its customers. Which of the following presents the GREATEST risk to the organization's reputation?

Third-party software is used for data analytics.

Data usage exceeds individual consent.

Revenue generated is not disclosed to customers.

Use of a data analytics system is not disclosed to customers.

Show Answer Comment (0)