Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 85

Question list

List of questions

Question 841

(0)

To reduce costs, an organization is combining the second and third tines of defense in a new department that reports to a recently appointed C-level executive. Which of the following is the GREATEST

Question 842

(0)

Which of the following should be management's PRIMARY focus when key risk indicators (KRIs) begin to rapidly approach defined thresholds?

Question 843

(0)

Legal and regulatory risk associated with business conducted over the Internet is driven by:

Question 844

(0)

When formulating a social media policy lo address information leakage, which of the following is the MOST important concern to address?

Question 845

(0)

Which of the following should be the PRIMARY focus of an IT risk awareness program?

Question 846

(0)

In an organization that allows employee use of social media accounts for work purposes, which of the following is the BEST way to protect company sensitive information from being exposed?

Question 847

(0)

Which of the following is a risk practitioner's BEST recommendation to address an organization's need to secure multiple systems with limited IT resources?

Question 848

(0)

Risk acceptance of an exception to a security control would MOST likely be justified when:

Question 849

(0)

Print jobs containing confidential information are sent to a shared network printer located in a secure room. Which of the following is the BEST control to prevent the inappropriate disclosure of co

Question 850

(0)

For a large software development project, risk assessments are MOST effective when performed:

Question 841

To reduce costs, an organization is combining the second and third tines of defense in a new department that reports to a recently appointed C-level executive. Which of the following is the GREATEST concern with this situation?

The risk governance approach of the second and third lines of defense may differ.

The independence of the internal third line of defense may be compromised.

Cost reductions may negatively impact the productivity of other departments.

The new structure is not aligned to the organization's internal control framework.

Show Answer Comment (0)

Question 842

Which of the following should be management's PRIMARY focus when key risk indicators (KRIs) begin to rapidly approach defined thresholds?

Designing compensating controls

Determining if KRIs have been updated recently

Assessing the effectiveness of the incident response plan

Determining what has changed in the environment

Show Answer Comment (0)

Question 843

Legal and regulatory risk associated with business conducted over the Internet is driven by:

the jurisdiction in which an organization has its principal headquarters

international law and a uniform set of regulations.

the laws and regulations of each individual country

international standard-setting bodies.

Show Answer Comment (0)

Question 844

When formulating a social media policy lo address information leakage, which of the following is the MOST important concern to address?

Sharing company information on social media

Sharing personal information on social media

Using social media to maintain contact with business associates

Using social media for personal purposes during working hours

Show Answer Comment (0)

Question 845

Which of the following should be the PRIMARY focus of an IT risk awareness program?

Ensure compliance with the organization's internal policies

Cultivate long-term behavioral change.

Communicate IT risk policy to the participants.

Demonstrate regulatory compliance.

Show Answer Comment (0)

Question 846

In an organization that allows employee use of social media accounts for work purposes, which of the following is the BEST way to protect company sensitive information from being exposed?

Educating employees on what needs to be kept confidential

Implementing a data loss prevention (DLP) solution

Taking punitive action against employees who expose confidential data

Requiring employees to sign nondisclosure agreements

Show Answer Comment (0)

Question 847

Which of the following is a risk practitioner's BEST recommendation to address an organization's need to secure multiple systems with limited IT resources?

Apply available security patches.

Schedule a penetration test.

Conduct a business impact analysis (BIA)

Perform a vulnerability analysis.

Show Answer Comment (0)

Question 848

Risk acceptance of an exception to a security control would MOST likely be justified when:

automation cannot be applied to the control

business benefits exceed the loss exposure.

the end-user license agreement has expired.

the control is difficult to enforce in practice.

Show Answer Comment (0)

Question 849

Print jobs containing confidential information are sent to a shared network printer located in a secure room. Which of the following is the BEST control to prevent the inappropriate disclosure of confidential information?

Requiring a printer access code for each user

Using physical controls to access the printer room

Using video surveillance in the printer room

Ensuring printer parameters are properly configured

Show Answer Comment (0)