Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 81

Question list

List of questions

Question 801

(0)

When of the following 15 MOST important when developing a business case for a proposed security investment?

Question 802

(0)

What are the MOST essential attributes of an effective Key control indicator (KCI)?

Question 803

(0)

When of the following provides the MOST tenable evidence that a business process control is effective?

Question 804

(0)

During a risk treatment plan review, a risk practitioner finds the approved risk action plan has not been completed However, there were other risk mitigation actions implemented. Which of the fallow

Question 805

(0)

What should be the PRIMARY driver for periodically reviewing and adjusting key risk indicators (KRIs)?

Question 806

(0)

Which of the following controls are BEST strengthened by a clear organizational code of ethics?

Question 807

(0)

Which of the following BEST represents a critical threshold value for a key control indicator (KCI)?

Question 808

(0)

Which of We following is the MOST effective control to address the risk associated with compromising data privacy within the cloud?

Question 809

(0)

Which of tie following is We MOST important consideration when implementing ethical remote work monitoring?

Question 810

(0)

An organization outsources the processing of us payroll data A risk practitioner identifies a control weakness at the third party trial exposes the payroll data. Who should own this risk?

Question 801

When of the following 15 MOST important when developing a business case for a proposed security investment?

identification of control requirements

Alignment to business objectives

Consideration of new business strategies

inclusion of strategy for regulatory compliance

Show Answer Comment (0)

Question 802

What are the MOST essential attributes of an effective Key control indicator (KCI)?

Flexibility and adaptability

Measurability and consistency

Robustness and resilience

Optimal cost and benefit

Show Answer Comment (0)

Question 803

When of the following provides the MOST tenable evidence that a business process control is effective?

Demonstration that the control is operating as designed

A successful walk-through of the associated risk assessment

Management attestation that the control is operating effectively

Automated data indicating that risk has been reduced

Show Answer Comment (0)

During a risk treatment plan review, a risk practitioner finds the approved risk action plan has not been completed However, there were other risk mitigation actions implemented. Which of the fallowing is the BEST course of action?

Review the cost-benefit of mitigating controls

Mark the risk status as unresolved within the risk register

Verify the sufficiency of mitigating controls with the risk owner

Update the risk register with implemented mitigating actions

Show Answer Comment (0)

Question 805

What should be the PRIMARY driver for periodically reviewing and adjusting key risk indicators (KRIs)?

Risk impact

Risk likelihood

Risk appropriate

Control self-assessments (CSAs)

Show Answer Comment (0)

Question 806

Which of the following controls are BEST strengthened by a clear organizational code of ethics?

Detective controls

Administrative controls

Technical controls

Preventive controls

Show Answer Comment (0)

Question 807

Which of the following BEST represents a critical threshold value for a key control indicator (KCI)?

The value at which control effectiveness would fail

Thresholds benchmarked to peer organizations

A typical operational value

A value that represents the intended control state

Show Answer Comment (0)

Question 808

Which of We following is the MOST effective control to address the risk associated with compromising data privacy within the cloud?

Establish baseline security configurations with the cloud service provider.

Require the cloud prowler 10 disclose past data privacy breaches.

Ensure the cloud service provider performs an annual risk assessment.

Specify cloud service provider liability for data privacy breaches in the contract

Show Answer Comment (0)

Question 809

Which of tie following is We MOST important consideration when implementing ethical remote work monitoring?

Monitoring is only conducted between official hours of business

Employees are informed of how they are bong monitored

Reporting on nonproductive employees is sent to management on a scheduled basis

Multiple data monitoring sources are integrated into security incident response procedures

Show Answer Comment (0)

Question 810

An organization outsources the processing of us payroll data A risk practitioner identifies a control weakness at the third party trial exposes the payroll data. Who should own this risk?

The third party's IT operations manager

The organization's process owner

The third party's chief risk officer (CRO)

The organization's risk practitioner

Show Answer Comment (0)

Total 1.200 questions