Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 9

Question list

List of questions

Question 81

(0)

Which of the following is the BEST way for a risk practitioner to help management prioritize risk response?

Question 82

(0)

Which of the following would BEST ensure that identified risk scenarios are addressed?

Question 83

(0)

A risk heat map is MOST commonly used as part of an IT risk analysis to facilitate risk:

Question 84

(0)

The PRIMARY objective of testing the effectiveness of a new control before implementation is to:

Question 85

(0)

Which of the following is the PRIMARY reason to perform ongoing risk assessments?

Question 86

(0)

Malware has recently affected an organization. The MOST effective way to resolve this situation and define a comprehensive risk treatment plan would be to perform:

Question 87

(0)

Which of the following is MOST effective against external threats to an organizations confidential information?

Question 88

(0)

Which of the following is the MOST important foundational element of an effective three lines of defense model for an organization?

Question 89

(0)

Which of the following is the MOST important characteristic of an effective risk management program?

Question 90

(0)

In an organization with a mature risk management program, which of the following would provide the BEST evidence that the IT risk profile is up to date?

Question 81

Which of the following is the BEST way for a risk practitioner to help management prioritize risk response?

Align business objectives to the risk profile.

Assess risk against business objectives

Implement an organization-specific risk taxonomy.

Explain risk details to management.

Show Answer Comment (0)

Question 82

Which of the following would BEST ensure that identified risk scenarios are addressed?

Reviewing the implementation of the risk response

Creating a separate risk register for key business units

Performing real-time monitoring of threats

Performing regular risk control self-assessments

Show Answer Comment (0)

Question 83

A risk heat map is MOST commonly used as part of an IT risk analysis to facilitate risk:

communication

identification.

treatment.

assessment.

Show Answer Comment (0)

Question 84

The PRIMARY objective of testing the effectiveness of a new control before implementation is to:

ensure that risk is mitigated by the control.

measure efficiency of the control process.

confirm control alignment with business objectives.

comply with the organization's policy.

Show Answer Comment (0)

Question 85

Which of the following is the PRIMARY reason to perform ongoing risk assessments?

Emerging risk must be continuously reported to management.

New system vulnerabilities emerge at frequent intervals.

The risk environment is subject to change.

The information security budget must be justified.

Show Answer Comment (0)

Question 86

Malware has recently affected an organization. The MOST effective way to resolve this situation and define a comprehensive risk treatment plan would be to perform:

a gap analysis

a root cause analysis.

an impact assessment.

a vulnerability assessment.

Show Answer Comment (0)

Question 87

Which of the following is MOST effective against external threats to an organizations confidential information?

Single sign-on

Data integrity checking

Strong authentication

Intrusion detection system

Show Answer Comment (0)

Question 88

Which of the following is the MOST important foundational element of an effective three lines of defense model for an organization?

A robust risk aggregation tool set

Clearly defined roles and responsibilities

A well-established risk management committee

Well-documented and communicated escalation procedures

Show Answer Comment (0)

Question 89

Which of the following is the MOST important characteristic of an effective risk management program?

Risk response plans are documented

Controls are mapped to key risk scenarios.

Key risk indicators are defined.

Risk ownership is assigned

Show Answer Comment (0)

Question 90

In an organization with a mature risk management program, which of the following would provide the BEST evidence that the IT risk profile is up to date?

Risk questionnaire

Risk register

Management assertion

Compliance manual

Show Answer Comment (0)

Total 1.200 questions