Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 90

Question list

List of questions

Question 891

(0)

The PRIMARY benefit of using a maturity model is that it helps to evaluate the:

Question 892

(0)

Which of the following provides the BEST evidence that a selected risk treatment plan is effective?

Question 893

(0)

Senior management has asked the risk practitioner for the overall residual risk level for a process that contains numerous risk scenarios. Which of the following should be provided?

Question 894

(0)

Which of the following is the PRIMARY benefit of stakeholder involvement in risk scenario development?

Question 895

(0)

Which of the following is MOST helpful to understand the consequences of an IT risk event?

Question 896

(0)

Which of the following is the BEST way to help ensure risk will be managed properly after a business process has been re-engineered?

Question 897

(0)

Which of the following would be a risk practitioner's BEST course of action when a project team has accepted a risk outside the established risk appetite?

Question 898

(0)

When reviewing the business continuity plan (BCP) of an online sales order system, a risk practitioner notices that the recovery time objective (RTO) has a shorter lime than what is defined in the d

Question 899

(0)

Which of the following is MOST important for maintaining the effectiveness of an IT risk register?

Question 900

(0)

Which of the following is the MOST important consideration when developing risk strategies?

Question 891

The PRIMARY benefit of using a maturity model is that it helps to evaluate the:

capability to implement new processes

evolution of process improvements

degree of compliance with policies and procedures

control requirements.

Show Answer Comment (0)

Question 892

Which of the following provides the BEST evidence that a selected risk treatment plan is effective?

Identifying key risk indicators (KRIs)

Evaluating the return on investment (ROI)

Evaluating the residual risk level

Performing a cost-benefit analysis

Show Answer Comment (0)

Question 893

Senior management has asked the risk practitioner for the overall residual risk level for a process that contains numerous risk scenarios. Which of the following should be provided?

The sum of residual risk levels for each scenario

The loss expectancy for aggregated risk scenarios

The highest loss expectancy among the risk scenarios

The average of anticipated residual risk levels

Show Answer Comment (0)

Question 894

Which of the following is the PRIMARY benefit of stakeholder involvement in risk scenario development?

Ability to determine business impact

Up-to-date knowledge on risk responses

Decision-making authority for risk treatment

Awareness of emerging business threats

Show Answer Comment (0)

Question 895

Which of the following is MOST helpful to understand the consequences of an IT risk event?

Fault tree analysis

Historical trend analysis

Root cause analysis

Business impact analysis (BIA)

Show Answer Comment (0)

Question 896

Which of the following is the BEST way to help ensure risk will be managed properly after a business process has been re-engineered?

Reassessing control effectiveness of the process

Conducting a post-implementation review to determine lessons learned

Reporting key performance indicators (KPIs) for core processes

Establishing escalation procedures for anomaly events

Show Answer Comment (0)

Question 897

Which of the following would be a risk practitioner's BEST course of action when a project team has accepted a risk outside the established risk appetite?

Reject the risk acceptance and require mitigating controls.

Monitor the residual risk level of the accepted risk.

Escalate the risk decision to the project sponsor for review.

Document the risk decision in the project risk register.

Show Answer Comment (0)

When reviewing the business continuity plan (BCP) of an online sales order system, a risk practitioner notices that the recovery time objective (RTO) has a shorter lime than what is defined in the disaster recovery plan (DRP). Which of the following is the BEST way for the risk practitioner to address this concern?

Adopt the RTO defined in the BCR

Update the risk register to reflect the discrepancy.

Adopt the RTO defined in the DRP.

Communicate the discrepancy to the DR manager for follow-up.

Show Answer Comment (0)