Home / Isaca / CRISC

Isaca CRISC Practice Test - Questions Answers, Page 95

Question list

List of questions

Question 941

(0)

An organization is concerned that its employees may be unintentionally disclosing data through the use of social media sites. Which of the following will MOST effectively mitigate tins risk?

Question 942

(0)

Who should be responsible (of evaluating the residual risk after a compensating control has been

Question 943

(0)

A global company s business continuity plan (BCP) requires the transfer of its customer information.... event of a disaster. Which of the following should be the MOST important risk consideration?

Question 944

(0)

Which of the following is the BEST approach to mitigate the risk associated with a control deficiency?

Question 945

(0)

Which of the following is PRIMARILY a risk management responsibly of the first line of defense?

Question 946

(0)

Which of the following would be the GREATEST concern for an IT risk practitioner when an employees.....

Question 947

(0)

Which of the following is the BEST indication that key risk indicators (KRls) should be revised?

Question 948

(0)

In order to determining a risk is under-controlled the risk practitioner will need to

Question 949

(0)

An organization is considering the adoption of an aggressive business strategy to achieve desired growth From a risk management perspective what should the risk practitioner do NEXT?

Question 950

(0)

Which of the following practices would be MOST effective in protecting personality identifiable information (Ptl) from unauthorized access m a cloud environment?

Question 941

An organization is concerned that its employees may be unintentionally disclosing data through the use of social media sites. Which of the following will MOST effectively mitigate tins risk?

Requiring the use of virtual private networks (VPNs)

Establishing a data classification policy

Conducting user awareness training

Requiring employee agreement of the acceptable use policy

Show Answer Comment (0)

Question 942

Who should be responsible (of evaluating the residual risk after a compensating control has been

Compliance manager

Risk owner

Control owner

Risk practitioner

Show Answer Comment (0)

Question 943

A global company s business continuity plan (BCP) requires the transfer of its customer information....

event of a disaster. Which of the following should be the MOST important risk consideration?

The difference In the management practices between each company

The cloud computing environment is shared with another company

The lack of a service level agreement (SLA) in the vendor contract

The organizational culture differences between each country

Show Answer Comment (0)

Question 944

Which of the following is the BEST approach to mitigate the risk associated with a control deficiency?

Perform a business case analysis

Implement compensating controls.

Conduct a control sell-assessment (CSA)

Build a provision for risk

Show Answer Comment (0)

Question 945

Which of the following is PRIMARILY a risk management responsibly of the first line of defense?

Implementing risk treatment plans

Validating the status of risk mitigation efforts

Establishing risk policies and standards

Conducting independent reviews of risk assessment results

Show Answer Comment (0)

Question 946

Which of the following would be the GREATEST concern for an IT risk practitioner when an employees.....

The organization's structure has not been updated

Unnecessary access permissions have not been removed.

Company equipment has not been retained by IT

Job knowledge was not transferred to employees m the former department

Show Answer Comment (0)

Question 947

Which of the following is the BEST indication that key risk indicators (KRls) should be revised?

A decrease in the number of critical assets covered by risk thresholds

An Increase In the number of risk threshold exceptions

An increase in the number of change events pending management review

A decrease In the number of key performance indicators (KPls)

Show Answer Comment (0)

Question 948

In order to determining a risk is under-controlled the risk practitioner will need to

understand the risk tolerance

monitor and evaluate IT performance

identify risk management best practices

determine the sufficiency of the IT risk budget

Show Answer Comment (0)

Question 949

An organization is considering the adoption of an aggressive business strategy to achieve desired growth From a risk management perspective what should the risk practitioner do NEXT?

Identify new threats resorting from the new business strategy

Update risk awareness training to reflect current levels of risk appetite and tolerance

Inform the board of potential risk scenarios associated with aggressive business strategies

Increase the scale for measuring impact due to threat materialization

Show Answer Comment (0)

Question 950

Which of the following practices would be MOST effective in protecting personality identifiable information (Ptl) from unauthorized access m a cloud environment?

Apply data classification policy

Utilize encryption with logical access controls

Require logical separation of company data

Obtain the right to audit

Show Answer Comment (0)

Total 1.200 questions