Isaca CRISC Practice Test - Questions Answers, Page 8
List of questions
Which of the following will BEST mitigate the risk associated with IT and business misalignment?
A trusted third party service provider has determined that the risk of a client's systems being hacked is low. Which of the following would be the client's BEST course of action?
The MAIN purpose of conducting a control self-assessment (CSA) is to:
Which of the following is the BEST key performance indicator (KPI) to measure the effectiveness of a disaster recovery plan (DRP)?
The risk associated with an asset before controls are applied can be expressed as:
In addition to the risk register, what should a risk practitioner review to develop an understanding of the organization's risk profile?
Which of the following is the MOST important key performance indicator (KPI) to establish in the service level agreement (SLA) for an outsourced data center?
After a risk has been identified, who is in the BEST position to select the appropriate risk treatment option?
A key risk indicator (KRI) is reported to senior management on a periodic basis as exceeding thresholds, but each time senior management has decided to take no action to reduce the risk. Which of the following is the MOST likely reason for senior management's response?
A business unit is updating a risk register with assessment results for a key project. Which of the following is MOST important to capture in the register?
Question