Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 86

Question list

List of questions

Question 851

(0)

The PRIMARY goal of conducting a business impact analysis (BIA) as part of an overall continuity planning process is to:

Question 852

(0)

Which of the following BEST indicates the risk appetite and tolerance level (or the risk associated with business interruption caused by IT system failures?

Question 853

(0)

Which of the following would BEST help to address the risk associated with malicious outsiders modifying application data?

Question 854

(0)

Which of the following should be determined FIRST when a new security vulnerability is made public?

Question 855

(0)

Which of the following should be of GREATEST concern lo a risk practitioner reviewing the implementation of an emerging technology?

Question 856

(0)

Which of the following is MOST important for an organization to update following a change in legislation requiring notification to individuals impacted by data breaches?

Question 857

(0)

When developing a risk awareness training program, which of the following training topics would BEST facilitate a thorough understanding of risk scenarios?

Question 858

(0)

An organization moved its payroll system to a Software as a Service (SaaS) application. A new data privacy regulation stipulates that data can only be processed within the country where it is collec

Question 859

(0)

Which of the following should be the risk practitioner's FIRST course of action when an organization plans to adopt a cloud computing strategy?

Question 860

(0)

Which of the following is the BEST way to quantify the likelihood of risk materialization?

Question 851

The PRIMARY goal of conducting a business impact analysis (BIA) as part of an overall continuity planning process is to:

obtain the support of executive management.

map the business processes to supporting IT and other corporate resources.

identify critical business processes and the degree of reliance on support services.

document the disaster recovery process.

Show Answer Comment (0)

Question 852

Which of the following BEST indicates the risk appetite and tolerance level (or the risk associated with business interruption caused by IT system failures?

Mean time to recover (MTTR)

IT system criticality classification

Incident management service level agreement (SLA)

Recovery time objective (RTO)

Show Answer Comment (0)

Question 853

Which of the following would BEST help to address the risk associated with malicious outsiders modifying application data?

Multi-factor authentication

Role-based access controls

Activation of control audits

Acceptable use policies

Show Answer Comment (0)

Question 854

Which of the following should be determined FIRST when a new security vulnerability is made public?

Whether the affected technology is used within the organization

Whether the affected technology is Internet-facing

What mitigating controls are currently in place

How pervasive the vulnerability is within the organization

Show Answer Comment (0)

Question 855

Which of the following should be of GREATEST concern lo a risk practitioner reviewing the implementation of an emerging technology?

Lack of alignment to best practices

Lack of risk assessment

Lack of risk and control procedures

Lack of management approval

Show Answer Comment (0)

Question 856

Which of the following is MOST important for an organization to update following a change in legislation requiring notification to individuals impacted by data breaches?

Insurance coverage

Security awareness training

Policies and standards

Risk appetite and tolerance

Show Answer Comment (0)

Question 857

When developing a risk awareness training program, which of the following training topics would BEST facilitate a thorough understanding of risk scenarios?

Mapping threats to organizational objectives

Reviewing past audits

Analyzing key risk indicators (KRIs)

Identifying potential sources of risk

Show Answer Comment (0)

An organization moved its payroll system to a Software as a Service (SaaS) application. A new data privacy regulation stipulates that data can only be processed within the country where it is collected. Which of the following should be done FIRST when addressing this situation?

Analyze data protection methods.

Understand data flows.

Include a right-to-audit clause.

Implement strong access controls.

Show Answer Comment (0)